Forum Discussion

Korai_331784's avatar
Korai_331784
Icon for Altostratus rankAltostratus
Sep 12, 2018

iRule Question

Hi,

 

Do we really needs irule for VS, if client comes from outside Internet to connect to WEB server to open w website then connect to Application server.

 

Client---->EXT-VIP----->IIS_PROXY----->INT-VIP---->APP-SERVERS

 

iRules
LTM
security
  • Ryannnnnnnnn's avatar
    Ryannnnnnnnn
    Icon for Altocumulus rankAltocumulus
    Sep 12, 2018

    No, i wouldn't think you need an iRule. What are you trying to achieve with the proposed iRule?

     

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Sep 13, 2018

    Hi Korai,

     

    all depends on what you want to do.

     

    So in your Case I advise you in your EXT-VIP to enable XFF in HTTP profile.

     

    Then if possible FW traffic from EXT-VIP to INT-VIP.

     

    Last point don't forget To set snat automap in order to avoir asymetric routing.

     

    So as i told you before Irule will depend your backend settings and what you want to achieve.

     

    Example if you backend server user absolute link you will maybe rewrite response body... and you may use an Irule.

     

    Clarify your need and we will help you.

     

    Regards,