Forum Discussion

Ken_113619's avatar
Ken_113619
Icon for Nimbostratus rankNimbostratus
Jun 02, 2009

iRule to redirect https to different pool question

I have 2 wildcard virtual servers that route any traffic the bip sees to a particular pool of proxy servers. 1 iRule is a wildcard VS for port 80 traffic. The other is a wildcard VS for port 443 traffic. I placed an iRule on my port 80 VS that says if you're coming from a list of subnets send to 1 pool otherwise send to a different pool. The iRule works great on the port 80 VS but when I apply it to the 443 VS traffic fails. I'm doing a "when CLIENT_ACCEPTED" so I figured the bip would see the source and dest IP's. Possibly I'm wrong.

 

The "SiteSubnets" data group has a lot of internal subnets associated to it.

 

Any help would be appreciated!

 

 

 

when CLIENT_ACCEPTED {

 

if { [matchclass [IP::client_addr] equals $::SiteSubnets] } {

 

pool BlueCoatProxyPool

 

} else {

 

pool bluecoat_pool

 

}

 

}
  • spark_86682's avatar
    spark_86682
    Historic F5 Account
    That looks like it should work just fine. When you say "traffic fails", what do you mean? If you do a tcpdump on port 443 on your server vlan(s), do you see the BIG-IP sending traffic to the pool members?