For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ricardo_Raza_14's avatar
Ricardo_Raza_14
Icon for Nimbostratus rankNimbostratus
Jul 04, 2018

irule time based to select pool

Hi I need to configure an irule based in time for select one pool, I need to configure the rule start at 7 pm and finish at 2 am of the next day each day, I configure the next irule   when RULE_IN...
application delivery
iRules
LTM
Ricardo_Raza_14's avatar
Ricardo_Raza_14
Icon for Nimbostratus rankNimbostratus
Jul 05, 2018

Hi thanks for your help, all work fine now.

 

But I have another error now, when I attach the irule to the virtual servers all work fine. but I have another irule to control of bandwidth. the irule is the next.

 

when CLIENT_ACCEPTED { set mycookie [IP::remote_addr]:[TCP::remote_port] BWC::policy attach dynamic_BC $mycookie }

 

But when I apply the second Irule to the virtual server the users that have the ips of this vs don't have internet, and if I disable this second rule all work fine.

 

I try to change the order of the irules, but the behavior is the same. Do you know if 2 irules can coexist together or if I need to have any consideration for this configuration.

 

Thanks for your help

 

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jul 05, 2018

    is there any tcl error in /var/log/ltm file?

     

  • Ricardo_Raza_14's avatar
    Ricardo_Raza_14
    Icon for Nimbostratus rankNimbostratus
    Jul 05, 2018

    Hi not really about tcl not exist any error, only in the logs I can see: RST sent from x.x.x.178:60229 to x.x.x.226:54485, [0x2afbce1:135] Port denied Jul 4 23:44:15 LPE-ADM-F501 err tmm[9880]: 01230140:3: RST sent from x.x.x.178:46274 to x.x.x.10:443, [0x29f7703:716] {peer} Flow expired (sweeper) (idle timeout) Jul 4 23:44:15 LPE-ADM-F501 err tmm[9880]: 01230140:3: RST sent from x.x.x.10:443 to x.x.x.131:46274, [0x29f7703:716] Flow expired (sweeper) (idle timeout)

     

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jul 05, 2018

    I never had such issue!

     

    Do you have this issue every time or only when the irule change the pool?

     

  • Ricardo_Raza_14's avatar
    Ricardo_Raza_14
    Icon for Nimbostratus rankNimbostratus
    Jul 11, 2018

    Hi I try to join two irules like,

    when CLIENT_ACCEPTED {

     Get the current time in seconds since the Unix epoch of 0-0-1970 
set now [clock seconds] 
set start [clock scan "5:00 pm"] 
set end [clock scan "11:59:59 pm"]
set start1 [clock scan "12:00 am"] 
set end1 [clock scan "2:00:00 am"]
set mycookie [IP::remote_addr]:[TCP::remote_port]


 Check if the current time is between the start and end times 
if {$now > $start and $now < $end} { 
    pool pool_navegacion

    BWC::policy attach  bwc_nocturno $mycookie
   log local0. " pool navegacion" 
   log local0. " bwc rule"
}

 if {$now > $start1 and $now < $end1} { 
    pool pool_navegacion
    log local0. " pool navegacion segundo if" 
}

    log local0. " bwc rule"

      log local0. " pool defecto global"

    }

    But not work, and in the logs I can't see any log about the error, only the behavior of the net is like in first moment have internet but then not have internet.

    What else do you seggest me