Forum Discussion

greg_chew_11034's avatar
greg_chew_11034
Icon for Nimbostratus rankNimbostratus
Sep 01, 2005

http::redirect and http::close and not closing the session.

Hey all.

 

 

I am trying to do a redirect to www.foo.com/test.

 

 

HTTP/1.0 302 Found

 

Location: http://www.foo.com/browse/home.html

 

Server: BIG-IP

 

Connection: Keep-Alive

 

Content-Type: text/html

 

Content-Length: 0

 

 

This redirect works fine, but in the same browser, if you do a www.foo.com/gohere, i get in my host header

 

 

GET /gohere HTTP/1.1

 

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*

 

Accept-Language: en-us

 

Accept-Encoding: gzip, deflate

 

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

 

Host: www.food.com

 

Connection: Keep-Alive

 

 

it seems that it's bypassing the f5 altogether and my irule set and tries to look for a directory called /gohere.

 

 

thoughts?

 

 

i have tried using HTTP::close before and after my redirect to no avail.

 

application delivery
dev
devops
iRules

12 Replies

Sort By
  • greg_chew_11034's avatar
    greg_chew_11034
    Icon for Nimbostratus rankNimbostratus
    Sep 01, 2005
    rule foo_uris_rule_v2 {
   when HTTP_REQUEST {
     set host [string tolower [getfield [HTTP::host] ":" 1]]
     set uri  [string tolower [HTTP::uri]]
     set matchstring [substr [substr $uri 1 "?"] 0 "/" ]
     if  { $matchstring == "" }
     {
        set matchstring $host$uri
     }
     else
     {
       set matchstring $host/$matchstring
     }
     set redstring [findclass $matchstring $::foo_uris_list " " ]
     set query_src [findstr [HTTP::uri] "?src=" 5 "&" ]
             if {$query_src == ""}
                  {
                     set query_src [findstr [HTTP::uri] "&src=" 5 "&" ]
                  }
             log local0. "query_src = $query_src"
             set query_trk_src [findstr [HTTP::uri] "trk_src=" 8 " " ]
             log local0. "query_trk_src = $query_trk_src"
             if { $query_src != "" }
             {
                 set redstring $redstring&src=$query_src
             }
             if { $query_trk_src != "" }
             {
                set redstring $redstring&trk_src=$query_trk_src
             }
     if {$redstring eq ""}
     {
        if { $host != "www.foo.com" and $host != "foo.com"}
        {
            set element [findclass "foo.com/" $::foo_uris_list " " ]
            log local0. "Defaulting subdomain to foo.com"
        }
     }
     if {$redstring != ""} {
         log local0. "redirecting to $redstring"
         HTTP::close
         HTTP::redirect $redstring
         HTTP::close
         event disable all
     }
}
}
  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    Sep 01, 2005
    Ok, I think I know what the problem is... The logical expression operators have very high precendence, and as a result have confused many, many people. In your host check:
    if { $host != "www.foo.com" and $host != "foo.com" }
    It's very likely that the "and" is getting done differently than you expect. I will add some parenthesis to show you the way it is likely being interpreted:
    if { ($host != ("www.foo.com" and $host)) != "foo.com" }
    As you can see, this would definitely produce a weird and unexpected outcome.

    So, try adding some parenthesis like so:
    if { ($host != "www.foo.com") and ($host != "foo.com") }
    and see if that doesn't help straighten out the problem.

  • greg_chew_11034's avatar
    greg_chew_11034
    Icon for Nimbostratus rankNimbostratus
    Sep 01, 2005
    When HTTP::close is before the HTTP::redirect,

     

     

    i am getting a Sep 1 15:37:14 tmm tmm[15966]: 011f0006:3: http_process_state_parse_header - Invalid state transition to ST_HTTP_SHUTDOWN

     

     

     

  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    Sep 01, 2005
    Also, I really don't think you should need to do the "event disable all" since this connection should really be closing. If for some reason, the connection is not being closed, no rule events will be triggered. Instead of doing an "event disable all", maybe you should do something like set a variable that says you are done. Something like this:
    
when CLIENT_ACCEPTED {
   set http_closed 0
}
when HTTP_REQUEST {
   if { $http_closed } {
      log "Hey, this connection should be closed!"
      reject
   }
   ...
   if { ... } {
      HTTP::redirect http://www.foo.bar.com/newuri
      set http_closed 1
   }
}

  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    Sep 01, 2005
    You really shouldn't need the HTTP::close with the HTTP::redirect as that is supposed to be the behavior of the redirect.
  • greg_chew_11034's avatar
    greg_chew_11034
    Icon for Nimbostratus rankNimbostratus
    Sep 01, 2005
    when the HTTP::close is in the irule, i get this in the ltm log.

     

     

    Sep 1 13:58:49 tmm tmm[15966]: 011f0006:3: http_process_state_parse_header - Invalid state transition to ST_HTTP_SHUTDOWN

     

     

    If i remove it, it goes away. also, this problem is more prevalent consistantly when you redirect to www.foo.com/feedback > external site (not www.foo.com) and then you try to go www.foo.com/gohere. i get the

     

     

    GET /gohereHTTP/1.1

     

    Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*

     

    Accept-Language: en-us

     

    Accept-Encoding: gzip, deflate

     

    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

     

    Host: www.foo.com

     

    Connection: Keep-Alive

     

    Cookie: unknownShopperId=2F989769E271BEDE431A9773C78F6DA7|||

     

     

    HTTP/1.1 404 Not Found

     

    Date: Thu, 01 Sep 2005 17:56:01 GMT

     

    Server: Apache/2.0.46 (Red Hat)

     

    Content-Length: 295

     

    Connection: close

     

    Content-Type: text/html; charset=iso-8859-1
  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    Sep 01, 2005
    In looking closer at your rule, the problem may very well be that a redirect is not happening when you expect it. I would suggest adding a bunch of log statements to help debug the logic and control flow of your rule. (For example, if $redstring == "" you set element and then never redirect - this is the path that the www.foo.com/gohere url would take, so it's not surprising that it gets load-balanced to a server in the pool that then doesn't know about it).

     

  • greg_chew_11034's avatar
    greg_chew_11034
    Icon for Nimbostratus rankNimbostratus
    Sep 02, 2005
    i checked the code and i am just defining $redirect, but there's only one http::redirect at the end, and the $redstring is what's being redirected. it's just that in real life, i try this scenario

     

     

    www.foo.com > 302 redirect to www.foo.com/home.html

     

    (in same browser)

     

    www.foo.com/gohere > 404 /gohere not found.

     

     

    open new browser

     

    www.foo.com/gohere > 302 redirect to www.foo.com/go_goes_here.html

     

     

  • unRuleY_95363's avatar
    unRuleY_95363
    Historic F5 Account
    Sep 02, 2005
    Did you ever take the "event disable all" out and verify that in fact the browser was reusing the same connection after the redirect? I'm not sure what your rationale is behind disabling all future rule event processing after the redirect. If the browser determines that it later has a request to the same ip address as a connection it already has open, then why does it need to use a new connection? As long as it redirects the next request also... ???

     

  • greg_chew_11034's avatar
    greg_chew_11034
    Icon for Nimbostratus rankNimbostratus
    Sep 02, 2005
    i did try taking the event disable all out of the config and it broke some of the logic.

     

     

    (in new browser/new session)

     

     

    www.foo.com/gohere/?src=test > 302 redirect to www.foo.com/go_to_here.html?src=test

     

     

    but then would loop and keep trying to 302 to ?src=test (another bug to be fixed, but a non issue if event disable all is there.