iRule LX replacement on bigip-Next

Question

Hi all - we use ILX on our current bigip platform and wanted to understand what will be alternate for it in the NEXT platform.

my use case is - when a HTTP request comes in the F5 extracts some information out of the request along with the client IP .

the ILX part makes a REST call to an external URL with that information . if it returns a 200 response - the HTTP request is allowed to move forward to the pool . if a 403 is returned from the external service a reset is sent back.

how can i do the same in bigip-Next - as we have nodejs code performing this tak.

Thanks

liefzimmerman · Answer

awan_m - if this resolved your question please consider Mark As Solution to help other community members find help faster/easier. Thanks, Lief

lucas_thompson · Answer

Fortunately BIG-IP Next Access will have this "query an arbitrary HTTP endpoint" functionality natively in upcoming versions in both per-request and per-session contexts. A quick check shows that you can write custom behaviors for different response codes so you'd be able to do something different if you get a 200 vs a 403.
As you're probably aware, BIG-IP APM has this native functionality only in a "per request" context.

awan_m · Answer

Thanks for the response - currently we do not use apm for this - the LTM virtual server has a iruleLX(ILX) associated to it . does this mean we would have to purchase a license for APM to get this to work?

lucas_thompson · Answer

Thanks for the clarification. If you're not using the APM agent to do this, you should be able to use this iRule solution to do the HTTP request:
https://clouddocs.f5.com/api/irules/HTTP-Super-SIDEBAND-Requestor-Client-Handles-Redirects-Cookies-Chunked-Transfer-APM-Access-etc.html

nikoolayy1 · Answer

Also as a note if you are using Next Access there is the HTTP Connector (carried over from APM) that can do the same. It may not still be added but it should be there in the future:
&nbsp;
F5 BIG-IP Next Access - Introduction

Forum Discussion

iRule LX replacement on bigip-Next

Recent Discussions

Jennifer Aniston Coffee

bigip v 16

iRule LX replacement on bigip-Next

R2600 device and tenant/partition configuration

About Vulnerability Countermeasures

Related Content

Replace path in redirect

replacing irule with policy

Replacing vserver certificates (say for SSL offload) via CLI?

Need to replace URL and URI

iRULE regsub error