iRule Redirect and mask destination URL

Wow, what an incredible response time! I will dig into this. Anything I should be looking out for in particular?

The main one is to use v10 if you're on LTM v10.x and the original ProxyPass for v9. The instructions following the code are fairly complete.

 

 

If you want to rewrite the response content, make sure to add a blank stream profile to the VIP and set static::RewriteResponsePayload to 1 or 2.

 

 

 
     Enable to rewrite page content (try a setting of 1 first) 
     (2 = attempt to rewrite host/path and just /path, 1 = attempt to rewrite host/path) 
    set static::RewriteResponsePayload 0 
 

 

 

And if you run into any issues enable debug and check the ltm log file for details on what the iRule is doing:

 

 

 
     Enable to debug ProxyPass translations via log messages in /var/log/ltm 
     (2 = verbose, 1 = essential, 0 = none) 
    set static:roxyPassDebug 0 
 

 

 

Aaron

Ok, I'm making progress, but I cannot seem to get it to work. Here is what is in the logs:

 

Mar 29 17:33:54 local/tmm1 info tmm1[5233]: Rule FXIP : FXIP: 10.0.10.13:58343 -> 10.0.7.14:80

 

Mar 29 17:33:54 local/tmm1 info tmm1[5233]: Rule FXIP : VS=FXIP, Host=fxpayments.ingagenetworks.com, URI=/: No rule found

 

Mar 29 17:33:54 local/tmm1 info tmm1[5233]: Rule FXIP : VS=FXIP, Host=fxpayments.ingagenetworks.com, URI=/: Rewriting response content enabled, but disabled on this response.

 

 

I do have my DataGroup List to match on "/". I'm not sure if this matters, but this will be redirecting to an external URL not within my own network.

 

 

--Shawn

What do you have in the "config" datagroup? It looks like there isn't a match for your hostname and the / URI.

 

 

Aaron

This is what I have for my entry in the DataGroup List:

 

"/" := "americanexpress-gfes.open.cs2.force.com/fxpayments/",

Was that the same config used when the log entry was seen? It seems like the request for / you've listed should have matched the datagroup.

 

 

Aaron

Yes, same rule.

 

The := syntax is supported in 10.1.0 for internal and external, file-based datagroups. In 10.0.x, it can only be used for external file datagroups. Which LTM version are you running? Do you have an external datagroup defined with that entry in it?

 

 

Aaron

We are running 10.0.1. What format does the file need to be in? Permissions? Also, this will redirect to an external URL that is not on our network. Does this matter?

For 10.0.x, you would need to create an external file based datagroup under /var/class or /config. I don't think you need any special permissions--probably just rw for root (chmod 644 /var/class/external.class.file would probably work fine).

 

 

The host:port that you're rewriting the requests for must be configured in a pool. As long as LTM has a route to that/those pool member/s, it will work fine.

 

 

Aaron