Forum Discussion

Sujeet_Singh_34's avatar
Sujeet_Singh_34
Icon for Nimbostratus rankNimbostratus
Jan 17, 2018

iRule Maintenance Page for HTTPS VIP

We a virtual server configured for both port HTTP and HTTPS, we need to setup an iRule for maintenance page if either VIP is down it will redirect to a maintenance page for both HTTP and HTTPS, we ha...
devops
iRules
LTM
Hannes_Rapp_162's avatar
Hannes_Rapp_162
Icon for Nacreous rankNacreous

If a Virtual Server is unavailable, client will receive TCP/RST. They are client-side listeners and you cannot serve any maintenance page content or even a basic HTTP redirect response if the network socket itself doesn't open. You must refer to status of a pool/pools/a pool member

Please paste output of your full Virtual Server configs

tmsh list ltm virtual vs-http-name
tmsh list ltm virtual vs-https-name

And your maintenance iRule currently in use

Regards,

Sujeet_Singh_34's avatar
Sujeet_Singh_34
Icon for Nimbostratus rankNimbostratus
Jan 18, 2018

==>Please find the output of the command you requested, just for the info, we have not mapped iRule for port 443 VIP, as it was not working, but after adding iRule for port 80, and we tested it was redirecting when we disable pool members for port 80 VIP. And we also have installed SSL certificate for port 443 VIP, and enabled both BIG IP side as well as backend servers side, I mean Client SSL profile and Server SSL profile enabled.

 

And finally thank you very much for your help

 

==>tmsh list ltm virtual abc_com_443 ltm virtual abc_com_443 { destination 10.35.20.7:https ip-protocol tcp mask 255.255.255.255 persist { source_addr { default yes } } pool abc_net_443 profiles { tcp { } } source 0.0.0.0/0 source-address-translation { type automap } translate-address enabled translate-port enabled vs-index 119 }

 

==>tmsh list ltm virtual abc_com_80 ltm virtual abc_com_80 { destination 10.35.20.7:http ip-protocol tcp mask 255.255.255.255 persist { source_addr { default yes } } pool abc_net_80 profiles { http { } tcp { } } rules { myabc.com_80-maintenance } source 0.0.0.0/0 source-address-translation { type automap } translate-address enabled translate-port enabled vs-index 118 }

 

==> iRule

 

myabc.com_80-maintenance

 

when HTTP_REQUEST {

 

If the myabc.com_80 is down, redirect to the maintenance page if { [active_members abc_net_80] < 1 } { HTTP::redirect "; return }

 

}

 

=>myabc.com_443-maintenance when HTTP_REQUEST {

 

If the myabc.com_443 is down, redirect to the maintenance page if { [active_members abc_net_443] < 1 } { HTTP::redirect "; return }

 

}