Forum Discussion
iRule - unexpected behavior
Hello Community,
I have recently experienced an unexpected behavior from an iRule, where the http responses were intermittent and failure detected on the last event in the iRule HTTP_RESPONSE_RELEASE.
We have noticed the odd behaviour started when the log destination pool members failed to respond to health-check monitor (server down).
Below is a snippt of the iRule event where the failure observed.
when HTTP_RESPONSE_RELEASE { # figure out the final duration and add it to the IPFIX log set stop [expr {[clock click -milliseconds] - $start}] IPFIX::msg set $rule1_msg1 flowDurationMilliseconds $stop # send the IPFIX log IPFIX::destination send $static::http_rule1_dest $rule1_msg1 }
I'm questioning two things:
- Why the failure was intermittent and havent affeted all responses?
- Why the pool memebrs status affected the iRule when they went down?
I'd appreciate any explanation.
Regards,
Sarah.
how long is the timeout value of the ipfix pool's health monitor?
you might also try tcl async::exec for the "IPFIX::destination send ..." so http response forwarding to client doesnt need to wait for the completion of the ipfix transmission
https://wiki.tcl-lang.org/55225#pagetoc7f911216- Sarah
Cirrus
Hi zamroni,
I was using the default udp health monitor (timeout 16).
if "IPFIX::destination send" waits for the completion of the ipfix transmission, why do you think the http responses were intermittent since the pool went down? i suspected it will affect all responses.
the ipfix pool was down for a while, which in result affected the application response stability, where the iRule was applied to.
and it only got fixed when I removed the health monitor from the pool.
HTTP_RESPONSE_RELEASE is triggered when f5 is about to release data to client.
https://clouddocs.f5.com/api/irules/HTTP-RESPONSE-RELEASE.htmlwhich means f5 will execute the commands in your irules before sending response to client.
is the ipfix server health status flappy (intermittently ok / not ok) when the health monitor was applied?
- LynnHuff
Nimbostratus
Thank you for the link.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com