Forum Discussion
Gbps_31870
Nimbostratus
NimbostratusHTTP/HTTPS Asymmetric-Routing iRule
Hello All,
Appreciate your help on the requirement ,,
Two sites with HTTP, HTTPS, and alt-HTTP proxying-services (StateFul flow) might have asymmetric traffic-flow which will break the esta...
Manuel_60430Nimbostratus
NimbostratusAlright, let's go through your points:
1) you can insert http headers as long as the protocol is http, no matter if you use the standard tcp port 80 or anything else
2) if you use a custom http header field the web server should not modify it at all. maybe if you use something like the X-Forwarded-For header field it could be used and adapted by web servers for different reasons
3) Unfortunately I'm not the greatest programmer, but I can think about this. Maybe someone from the community could do his magic? :-)
4) do you perform SSL offloading on the BigIP? Otherwise it will be tricky. Depending on how much https traffic you are facing, you could balance all https traffic through one path (but I'm not sure if you can apply automatic failover in this case) or you could use session cookies. Of course if the client or browser do not support cookies this will not work either. Maybe for https session cookie with fallback to source IP can be applicable.
cheers, wizz
Gbps_31870Thanks Wizz for the information ,, We're not doing SSL offloading, hence, I think it's not possible. If I cover HTTP traffic by this iRule it would be great. Hopefully someone will help us on this. BR, Aziz- Gbps_31870mmm ,, this won't work as the connection establishment or TCP-only control packets won't be applicable for this HTTP::header insertion. However, there is another way I'm thinking of, which would solve the issue. Is the iRule capable of tracking the active connection through LTM; i.e if the connection is active, then proceed with normal bahvior; if not (which means it reached the wrong LTM), then take X action. Thanks & BR, Aziz
- Manuel_60430sorry I don't really get the point with "TCP-only control packets". Do you perform only tcp load balancing? Basically you can refer to tcp statements, as well as to http in iRules - everything is possible :-) I'm just not sure, if this will solve your problem, but anyway you can have a look at this documentation: https://clouddocs.f5.com/api/irules/TCP.html best regards