HTTPS REDIRECTION : Specific NODE using iRULE

Hi,

Could you add this in a seperate irule?

when HTTP_REQUEST {
         log local0. "This is the HTTP Host [HTTP::host]"
         log local0. "This is the HTTP Path [HTTP::path]"
}

And past the logging here?

Because it looks like there is no match.

Cheers,

Kees

Hi Kees van den Bos ,

I have the created the irule logging , here is the logs :

Jan 21 11:44:50 BNE1PLBVENT01 info tmm[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Host test-esb-vip-bma.example.com

Jan 21 11:44:50 BNE1PLBVENT01 info tmm[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Path /m2p/

Jan 21 11:44:51 BNE1PLBVENT01 info tmm[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Host test-esb-vip-bma.example.com

Jan 21 11:44:51 BNE1PLBVENT01 info tmm[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Path /m2p/

Jan 21 11:44:55 BNE1PLBVENT01 info tmm1[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Host test-esb-vip-bma.example.com

Jan 21 11:44:55 BNE1PLBVENT01 info tmm1[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Path /m2p/

Jan 21 11:44:55 BNE1PLBVENT01 info tmm[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Host test-esb-vip-bma.example.com

Jan 21 11:44:55 BNE1PLBVENT01 info tmm[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Path /m2p/

Jan 21 11:44:56 BNE1PLBVENT01 info tmm1[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Host test-esb-vip-bma.example.com

Jan 21 11:44:56 BNE1PLBVENT01 info tmm1[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Path /m2p/

Jan 21 11:44:57 BNE1PLBVENT01 info tmm[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Host test-esb-vip-bma.example.com

Jan 21 11:44:57 BNE1PLBVENT01 info tmm[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Path /m2p/

Jan 21 11:44:57 BNE1PLBVENT01 info tmm1[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Host test-esb-vip-bma.example.com

Jan 21 11:44:57 BNE1PLBVENT01 info tmm1[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Path /m2p/

Jan 21 11:45:02 BNE1PLBVENT01 info tmm1[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Host test-esb-vip-bma.example.com

Jan 21 11:45:02 BNE1PLBVENT01 info tmm1[16685]: Rule /Common/irule_Logging <HTTP_REQUEST>: This is the HTTP Path /m2p/

The irule is hitting as expected BUT its not taking any ACTION . Not sure if my iRule is wrong or something else .

The requirement is to HIT via LB so that SSL can be performed via F5 . i will remove "return" statement and see how it goes .

Ok removed the "Return" statement from iRule but no luck , Still says no server selected .

I wrote a simplified variant of your iRule. Tested and works as expected.

when HTTP_REQUEST {
    if { [HTTP::host] equals "www.myfancydomain.com" && [HTTP::uri] starts_with "/test" } {
        node 10.100.153.40 3000
    }
}

Note that I am matching the HTTP::host with equals, not with contains, because HTTP::host should be an exact match anyways.

Also I used HTTP::uri instead of HTTP::path and, but more important, I use starts_with, because HTTP::uri might also be /test/image1.jpg, test/index.html...

Differences between are explained here:

https://clouddocs.f5.com/api/irules/HTTP__path.html

https://clouddocs.f5.com/api/irules/HTTP__uri.html

Differences between contains, equals, starts_with and so on here:

https://devcentral.f5.com/s/articles/irules-101-02-if-and-expressions

And since you are always matching the same HTTP::host value, you might want to remove that check from your iRule logic and go for a switch statement to only match the HTTP::uri. Something like this.

switch -glob [HTTP::uri] {
  "/foo*" {
    # this will match on any string that starts with "/foo"
  }
  "*bar" {
    # this will match on any string that ends with "bar"
  }....

For details see here: https://devcentral.f5.com/s/articles/irules-101-04-switch

And another thing I noticed is:

You match for

if {[HTTP::host] contains "TEST-ESB-VIP-BMA.example.com" and

and you log:

<HTTP_REQUEST>: This is the HTTP Host test-esb-vip-bma.example.com

Notice a difference in CAPITALIZATION. Maybe better try

if {([string tolower [HTTP::host]] equals "www.myfancydomain.com") 

Hi,

As Daniel stated, the host is in lower case, not upper.

Could you test this irule:

when HTTP_REQUEST { 
    if {([string tolower [HTTP::host]] equals "test-esb-vip-bma.example.com") } {
        if {[HTTP::uri] starts_with "/m2p" } 
        {
        node 10.30.214.1 2783
        return 
        }
	    if {[HTTP::uri] starts_with "/aps"}
        {
        node 10.30.230.31 7001
        return 
        }
	    if {[HTTP::uri] starts_with "/bmx"} 
        {
        node 10.30.214.38 61648
        return 
        }
	    if {[HTTP::uri] starts_with "/cts"}
        {
        node 10.30.214.236 4515
        return 
        }
	    if {[HTTP::uri] starts_with "/mii"} 
        {
        node 10.30.215.174 50000
        return 
        }
	    if {[HTTP::uri] starts_with "/ampla-bma"}
	    {
        node 10.30.222.43 8889
        return 
        }
		if {[HTTP::uri] starts_with "/ampla-bmc"} 
	    {
        node 10.38.2.48 8889
        return 
        }
        if {[HTTP::uri] starts_with "/iqt-bma"} 
	    {
        node 10.30.215.208 8889
        return 
        }
        if {[HTTP::uri] starts_with "/iqt-bmc"}
	    {
        node 10.30.222.230 8889
        return 
        }
    }    	
}

Cheers,

Kees

Hi Kees ,

Thanks for the code . it work for "/m2p" and other NOT working . Now I removed RETURN at the end of each NODE . Looks likes its Working . I am doing more TESTING .

Can you please ADVISE on this Irule .

when HTTP_REQUEST { 

  if {([string tolower [HTTP::host]] equals "test-esb-vip-bma.bhp.com") } {

    if {[HTTP::uri] starts_with "/m2p" } 

    {

    node 10.30.214.1 2783

    }

  if {[HTTP::uri] starts_with "/aps"}

    {

    node 10.30.230.31 7001

    }

  if {[HTTP::uri] starts_with "/bmx"} 

    {

    node 10.30.214.38 61648

    }

  if {[HTTP::uri] starts_with "/cts"}

    {

    node 10.30.214.236 4515

    }

  if {[HTTP::uri] starts_with "/mii"} 

    {

    node 10.30.215.174 50000

    }

  if {[HTTP::uri] starts_with "/ampla-bma"}

  {

    node 10.30.222.43 8889

    }

if {[HTTP::uri] starts_with "/ampla-bmc"} 

  {

    node 10.38.2.48 8889

    }

    if {[HTTP::uri] starts_with "/iqt-bma"} 

  {

    node 10.30.215.208 8889

    }

    if {[HTTP::uri] starts_with "/iqt-bmc"}

  {

    node 10.30.222.230 8889

    }

  }  

}

Many Thanks for Helping me OUT .

Hi,

This rule looks fine to me.

Cheers,

Kees

Yes, you had strictly defined your URI path at the first attempts : "eq". Please note that the last script states "start with" which offers more flexibility...but less security.