Forum Discussion
Shawn_Salyers_8
Nimbostratus
Dec 16, 2010Client Certificate Help Needed!!!!
I have been searching the forums and have not been able to find an iRule example that I am able to get working. Simply put, I need to require a client certificate and allow access based on the thumbp...
Nov 14, 2011
Randy, the three states are documented as follows in the manuals:
Enabled - All traffic allowed
Disabled - Only persistent or active connections allowed
Forced Offline - Only active connections allowed
Enabled is easy, it's on and new connections are allowed.
Disabled means that no new connections are allowed in but persistent connections (ones that have been assigned through a persistence profile) or currently active ones are allowed.
Forced Offline means that only currently active connections are allowed (not persistent connections).
In your situation, the sample code I referenced should put the pool member in "forced offline" mode, but if you are seeing long lived connections, then that seems like there are some persistence entries still in there (or you have some really long lived keep-alive connections to your backend apps.
-Joe