Forum Discussion
Adrian_Pascalau
Nimbostratus
Nimbostratusif statement weight
Hi,
I need to check all the packets comming from certain vlans/subnets, thus I am wondering which check is lighter from LTM point of view: using LINK:vlan_id inside the if statement, or IP:client_addr?
when CLIENT_ACCEPTED {
if { [matchclass [IP::client_addr] equals $::mySubnet] }{
// do something
}
}
or
when CLIENT_ACCEPTED {
if { [LINK::vlan_id] equals $::myVlan }{
// do something
}
}
Thank you in advance.
Adrian
Nicolas_MenantEmployee
If i remember correctly matchclass againt an IP datagroup is more efficient than against a string datagroup.
You can compare both in your environment by using the timing command: Click here