For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Korai_331784's avatar
Korai_331784
Icon for Altostratus rankAltostratus
Sep 12, 2018

iRule Question

Hi,   Do we really needs irule for VS, if client comes from outside Internet to connect to WEB server to open w website then connect to Application server.   Client---->EXT-VIP----->IIS_PROXY--...
iRules
LTM
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Sep 13, 2018

Hi Korai,

 

all depends on what you want to do.

 

So in your Case I advise you in your EXT-VIP to enable XFF in HTTP profile.

 

Then if possible FW traffic from EXT-VIP to INT-VIP.

 

Last point don't forget To set snat automap in order to avoir asymetric routing.

 

So as i told you before Irule will depend your backend settings and what you want to achieve.

 

Example if you backend server user absolute link you will maybe rewrite response body... and you may use an Irule.

 

Clarify your need and we will help you.

 

Regards,