For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jason_Keating's avatar
Jason_Keating
Icon for Altostratus rankAltostratus
Oct 05, 2010

iRule as a Test Tool (hey that rhymes!)

Has anyone ever used iRules for test tools?

 

 

 

I'm faced with standing up a bunch of web servers to handle break tests for a client system, but a colleague asked the question if the LTM could do it ... with and iRule and a Data Group (external file) I don't see why not.

 

 

 

Wondering if anyone else has done this in the past, and if there were any gotchas/advice - ignoring the obvious bandwidth/connections/iRule CPU consumption overheads etc.

 

 

 

Thanks

 

J

 

config
design

2 Replies

  • George_Watkins_'s avatar
    George_Watkins_
    Historic F5 Account
    Oct 05, 2010
    We've had a few questions along these lines and the short answer is no. iRules were never intended to be a testing tool. If you were to put an iRule in a tight loop for testing purposes, TMM instance will be restarted after it is unable to answer heartbeats. I am a big opensource advocate and as such have had great success with httperf. You can really beat a web server up with it. Here is the project page: http://www.hpl.hp.com/research/linux/httperf/

     

     

    If you want a fun read on this topic, check out this post: http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/afv/topic/aft/1174147/aff/5/showtab/groupforums/Default.aspx

     

     

    There was quite a bit of dialog on how to exercise TMM via iRules. Hope this helps,

     

     

    George
  • L4L7_53191's avatar
    L4L7_53191
    Icon for Nimbostratus rankNimbostratus
    Oct 05, 2010
    I've recently been using siege and the totally killer curl-loader for this type of thing (mock SSL testing for the TPS report stuff).

     

     

    This may not apply to your scenario, but one place where BigIP can be a HUGE help with testing: use it for serverside SSL if you're running HTTPS loads to test back end SSL TPS capacity on the server side. This offloads the server-side SSL traffic to the cavium chip and you'll be able to use a normal HTTP VS on your test agent side. For me, this trick gave me a ton more headrom on my client side because they didn't have to deal with cert negotiation. Overall, it essentially added up to a few thousand extra client connections.

     

     

    The setup is like: Test clients -> Port 80 VIP on BigIP -> Serverside SSL-> pool members using SSL

     

     

    It worked great.

     

     

    -Matt