Forum Discussion
lostinberlin_11
Nimbostratus
Aug 03, 2015iApp object lose their app-service attribute
Hi,
could anyone tell me under which circumstances an iApp could lose it's relationship to the iApp objects? I have the following setup:
two BigIP instances in a HA cluster.
1 x iApp creati...
Fred_Slater_856
Aug 03, 2015Historic F5 Account
Steve- This sounds like a bug. A virtual should not lose its app-service property any more than it should lose its profiles or any other properties that are associated with it. I assume that strict-updates was enabled at the time this occurred? What version of TMOS are you running? Is this an F5 iApp or one of your own? -Fred
lostinberlin_11
Nimbostratus
Aug 04, 2015Hi Fred,
Okay, I have narrowed it down to the merging of bigip config files which seems to be the problem.
We have snippets of bigip config which we keep in SVN in order to track the changes. This test only applies to the iRules used in a virtual server. However, my guess is that the shared SSL configs do the same.
Example:
- iRule definition (kept in subversion to allow traceability).
- myApp.app/myAppIntern-443 uses this iRule
- iRule merged into the config.
- myApp.app/myAppIntern-443 loses app-service
**** iRule config file ******
steve@(myBigIP)(cfg-sync In Sync)(Active)(/Common)(tmos) bash
[steve@myBigIP:Active:In Sync] ~ cat /tmp/irules.conf
ltm rule ir-myApp-webstart {
when HTTP_REQUEST {
$Header: http://subversion/path/to/file/irules.conf 83700 2015-07-30 13:31:20Z steve $
if { [string tolower [HTTP::uri]] starts_with "/webstart/" } {
HTTP::uri [string replace [HTTP::uri] 1 12 myAppwebstart]
}
}
}
**** Servers BEFORE ******
sbl@(lb1a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm virtual myApp.app/myApp app-service rules
ltm virtual myApp.app/myAppIntern-9000 {
app-service /Common/myApp.app/myApp
rules {
ir-myApp-admin
}
}
ltm virtual myApp.app/myAppIntern-443 {
app-service /Common/myApp.app/myApp
rules {
ir-encrypt128bits
ir-myApp-webstart
ir-myApp-admin
}
}
ltm virtual myApp.app/myAppExtern-back-80 {
app-service /Common/myApp.app/myApp
rules none
}
ltm virtual myApp.app/myAppExtern-front-80 {
app-service /Common/myApp.app/myApp
rules {
_sys_https_redirect
}
}
ltm virtual myApp.app/myAppExtern-front-443 {
app-service /Common/myApp.app/myApp
rules {
ir-encrypt128bits
}
}
**** Merge ******
steve@(myBigIP)(cfg-sync In Sync)(Active)(/Common)(tmos) load sys config file /tmp/irules.conf merge
Loading configuration...
/tmp/irules.conf
**** Servers AFTER ******
sbl@(lb1a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm virtual myApp.app/myApp app-service rules
ltm virtual myApp.app/myAppIntern-9000 {
app-service /Common/myApp.app/myApp
rules {
ir-myApp-admin
}
}
ltm virtual myApp.app/myAppIntern-443 {
app-service none
rules {
ir-encrypt128bits
ir-myApp-webstart
ir-myApp-admin
}
}
ltm virtual myApp.app/myAppExtern-back-80 {
app-service /Common/myApp.app/myApp
rules none
}
ltm virtual myApp.app/myAppExtern-front-80 {
app-service /Common/myApp.app/myApp
rules {
_sys_https_redirect
}
}
ltm virtual myApp.app/myAppExtern-front-443 {
app-service /Common/myApp.app/myApp
rules {
ir-encrypt128bits
}
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects