For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

abvaidya_182376's avatar
abvaidya_182376
Icon for Nimbostratus rankNimbostratus
Jan 12, 2015

http and https session persistence based on a header value and client ip combination

I am trying to configure BIG IP SLB for session persistence based on value of a non standard HTTP header (lets say "XYZ") and facing a few

 

hitches on my BIG IP site. I want that all client HTTP / HTTPS requests with same value of header "XYZ" should go to the same server behind

 

SLB, always. The issue is mainly due to incorrect combination of “HTTP Profile” and “Persistence profile” due to which request on HTTPS from

 

client is not reaching the servers via SLB. It seems to a persistence profile issue because when I remove the Http profile (just created a

 

random HTTP profile) and the persistence profile (which is based on irule), the same server becomes reachable via SLB.

 

The irule is

 

when HTTP_REQUEST { if {[HTTP::header exists "FROM-AGENT-ID"]} { persist uie [HTTP::header values "XYZ"] } }

 

My end aim to have persistence based on combination of value of header as well as IP address of the client connecting. In case persistence

 

based on combination is not possible, persistence based on just header should be fine. I need to support both session persistence on HTTP as

 

well as HTTPS (of course by two different virtual servers)

 

The screenshots show the relevant configuration of the SLB. If you can pin point the configuration causing the issue, it would be of great help.

 

 

19 Replies