iRule for selecting different pools collect from ldap-query

LDAP is a binary protocol, so it really depends on a lot of variables. For instance:

1. Most important, the query is usually just one of several LDAP messages that occur. There's also usually bind and unbind messages, which don't carry any query information.

    

2. Where are you specifying the domain in the query? In the search base or in a DN value? You would necessarily have to write an iRule that could parse the binary LDAP request, so knowing where to look would be important. There are various LDAP proxy iRules floating around, but none are trivial.

    

Is it that you simply need to load balance LDAP requests, or could you potentially offload the entire process to the Access Policy Manager module, which would make light work of the whole thing?