Forum Discussion
Albert__Tase_70
Nimbostratus
NimbostratusIrule for 4.6.1
Hello below is an Irule for redirect could I plase get some recomendations the tac suggested that i post this rule here thank you
if (http_host contains "demo.nature.com" or http_host contains "deutsche.nature.com" or http_host contains "mailart.nature.com" or http_host contains "fastart.nature.com" or http_host contains "naturereprints.com") {
use pool nature
}
else if (http_host contains "isn-online.org") {
if (http_uri == "/" or http_uri == "/index.html") {
redirect to "http://www.isn-online.org/isn"
}
else {
use pool Java
}
}
else if (http_host contains "www.palgrave-journals.com") {
if (http_uri == "/" or http_uri == "/index.html") {
redirect to "http://www.palgrave-journals.com/pal"
}
else if (http_uri == "/mysiteaccount") {
redirect to "http://www.palgrave-journals.com/nams/svc/mysiteaccount"
}
else if (http_uri starts_with "/cgi-bin" or http_uri == "/rss" or http_uri starts_with "/services/link.taf" or http_uri starts_with "/doifinder/10.1057" or http_uri starts_with "/doifinder/10.1080" or http_uri == "/login/login.taf") {
use pool nature
}
else if (http_uri starts_with "/registration/Modify_registration.taf" or http_uri starts_with "/registration/modify_registration.taf" or http_uri starts_with "/registration/index.taf") {
redirect to "http://www.palgrave-journals.com/myaccount"
}
else if (http_uri starts_with "/registration/register.taf" or http_uri == "/pal/register/redirect.taf") {
redirect to "http://www.palgrave-journals.com/register"
}
else if (http_uri starts_with "/site_registration/site_login.taf") {
redirect to "http://www.palgrave-journals.com/nams/svc/mysiteaccount"
}
else if (http_uri == "/site_registration/") {
redirect to "http://www.palgrave-journals.com/nams/svc/mysiteaccount"
}
else if (http_uri starts_with "/site_registration/site_register.taf") {
redirect to "http://www.palgrave-journals.com/nams/svc/siteregister"
}
else if (http_uri starts_with "/offer/" or http_uri starts_with "/cgi-taf/links.taf") {
redirect to "http://www.palgrave-journals.com/empty.txt"
}
else if (http_uri starts_with "/cgi-taf/button_link.taf") {
redirect to "http://www.palgrave-journals.com/"
}
else if (http_uri starts_with "/cgi-taf/subscribe_link.taf") {
redirect to "http://www.palgrave-journals.com/subscribe"
}
else if (http_uri starts_with "/dynasearch" or http_uri starts_with "/Dynasearch" or http_uri starts_with "/DynaSearch") {
redirect to "http://www.palgrave-journals.com/common/access/replaced.vm"
}
else {
use pool palgrave-foxtrot
}
}
else if (http_uri starts_with "/reports" or http_uri starts_with "/cgi-bin" or http_uri == "/rss" or http_uri starts_with "/services/link.taf" or http_uri starts_with "/ebd/cpd/" or http_uri starts_with "/doifinder/10.1057" or http_uri starts_with "/doifinder/10.1080" or http_uri == "/login/login.taf") {
use pool nature
}
else if (http_uri starts_with "/registration/Modify_registration.taf" or http_uri starts_with "/registration/modify_registration.taf" or http_uri starts_with "/registration/index.taf") {
redirect to "http://www.nature.com/myaccount"
}
else if (http_uri starts_with "/registration/register.taf") {
redirect to "http://www.nature.com/register"
}
else if (http_uri starts_with "/site_registration/site_login.taf") {
redirect to "http://www.nature.com/mysiteaccount"
}
else if (http_uri == "/site_registration") {
redirect to "http://www.nature.com/mysiteaccount"
}
else if (http_uri starts_with "/site_registration/site_register.taf") {
redirect to "http://www.nature.com/siteregister"
}
else if (http_uri starts_with "/offer/" or http_uri starts_with "/cgi-taf/links.taf") {
redirect to "http://www.nature.com/empty.txt"
}
else if (http_uri starts_with "/cgi-taf/button_link.taf") {
redirect to "http://www.nature.com/index.html"
}
else if (http_uri starts_with "/cgi-taf/subscribe_link.taf") {
redirect to "https://secure.nature.com/subscribe/nature"
}
else if (http_uri starts_with "/dynasearch" or http_uri starts_with "/Dynasearch" or http_uri starts_with "/DynaSearch") {
redirect to "http://www.nature.com/common/access/replaced.vm"
}
else if (http_uri starts_with "/cgi-taf/Ea2.taf") {
redirect to "http://www.nature.com/nature-events/search-events/index.html"
}
else if (http_uri starts_with "/login/password_help.taf") {
redirect to "http://www.nature.com/nams/svc/lostpassword"
}
else if (http_uri starts_with "/help/advertising") {
redirect to "http://npg.nature.com/media/nature/index.html"
}
else if (http_host contains "www.emboj.org") {
redirect to "http://www.nature.com/emboj/"
}
else if (http_host contains "emboreports.npgjournals.com") {
redirect to "http://www.nature.com/embor/"
}
else if (http_host contains "embojournals.npgjournals.com") {
redirect to "http://www.nature.com/emboj/"
}
else if (http_host contains "www.npgjournals.com") {
redirect to "http://www.nature.com/embojournal/"
}
else if (http_host contains "www.natureprotocols.com") {
redirect to "http://www.nature.com/nprot/index.html"
}
else if (http_host contains "www.journalofmedicalmarketing.com") {
redirect to "http://www.palgrave-journals.com/jmm"
}
else if (http_host contains "www.damjournal.com") {
redirect to "http://www.palgrave-journals.com/dam"
}
else if (http_uri == "/nmeth/applicationnotes") {
redirect to "http://www.nature.com/app_notes/nmeth"
}
else if (http_uri == "/nmeth/applicationnotes/") {
redirect to "http://www.nature.com/app_notes/nmeth"
}
else if (http_uri starts_with "/press/") {
redirect to "http://press.nature.com"
}
else {
use pool Java
}- That's quite the rule...
So, what kind of recommendations are you looking for?
-Colin 
Albert__Tase_70would like to know if anyone has any ideas on how to optimize the Irule its kinda been identified with site latenacy and outages do to high traffic load and th ddeamon parsing this rule for the traffic- First of all, there is no "daemon" parsing iRules in v4.x. Complex rules (like yours) may really cause high latency.
To be able to suggest how to optimize your rule, I'd need to have detailed description of how you actually want to route your requests. In theory it is possible to reverse engineer this from your rule, but it is a) time consuming b) works only if I can assume that your rule currently implements exactly the necessary behavior.
Here are some general iRule optimization techniques:
* if possible avoid destination address or server name matching and replace it with unique virtual server which of course requires that there is unique address,
* if unique addresses for sites are not an option, use redirection to unique port specific virtual servers for each site (see example bellow),
* put the most likely matches (e.g. the most frequently visited URIs) at the top,
* hierarchically decompose your rule by matching common conditions first and do additional matching in the body of the higher level rule (you do that in your rule already ... but maybe you can do more of that :-)),
* use class matching instead of if-then-else chains wherever possible,
* cluster matches resulting in the same action (i.e. selection of the same pool),
Example of redirection to port specific virtual based on the "Host" header in the request:rule host_switch { if(http_host == "www.palgrave-journals.com") { redirect to "http://www.palgrave-journals.com:81" + http_uri } else if(http_host == "www.nature.com") { redirect to "http://www.nature.com:82" + http_uri } else if( .... } rule palgrave { } rule nature { } ... virtual :80 { use rule host_switch } virtual :81 { use rule palgrave } virtual :82 { use rule nature } ...
The example assumes that DNS names (www.nature.com et. al) for all of your sites resolve to the same IP address (denoted above). I've checked couple of them and it seems to be the case.
Caveats:
* using other TCP port than 80 for HTTP traffic is suboptimal because some cheaper (e.g. stateless) and/or misconfigured firewalls may block the traffic. Also some cheap (read: braindead) IDSes may flag the traffic as suspect,
* if your web applications contain many absolute references (i.e. including the host part of the URI) it may actually end-up being slower than the one-common-rule approach,
The above decomposition should speed up rule matching in your case despite certain level of duplication of "rule code" in individual "per-site" rules. The main speed-up is comes from the fact that the "host_switch" rule is consulted only once per client visit and majority of current HTTP clients and servers support persistent (keep-alive) connections (however see caveat 2 above which may spoil the trick). The per-site rules are still going to be evaluated on each HTTP request (assuming that you have global variable "web parse" set to "all" [the default] in your configuration) but they should be shorter than your current one-for-all rule and hence quicker to evaluate.
As allways YMMV :-).
