Forum Discussion

spalande's avatar
spalande
Icon for Nacreous rankNacreous
Sep 30, 2013

iRule to redirect to cloud service..

Need help to write an iRule, where need to differentiate outside request containing XML payload, and the send it to the cloud server (having dynamic IP, fixed domain name)basically request is provisioning request for one of the cell phone service.

 

Cloud then send response back to the internal XDM server, and notification should be send from internal server to cloud again. Any thoughts to achieve this is helpful. Thanks in advance!!

 

application delivery
aws
BIG-IP Access Policy Manager (APM)
cloud
deployment
devops
iRules
security

3 Replies

  • StephanManthey's avatar
    StephanManthey
    Icon for Nacreous rankNacreous
    Sep 30, 2013

    First part sound similar to a task on a forward proxy.

    So after you figured out the cloud server´s name by parsing the HTTP payload in the context of HTTP_REQUEST you need to resolve the name: 

    NAME::lookup $cloud_server

    After the name resolution the NAME_RESOLVED will be triggered and after some sanity check you can pick the node, i.e.:

    when NAME_RESOLVED {
    set host_ip [NAME::response]
    if { $host_ip ne "" } {
          use only the first A-record from a list of multiple returned IP-addresses
        set host_ip [getfield $host_ip " " 1]
        node $host_ip $port
    }
}
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Sep 30, 2013

    A couple of questions:

     

    1. Do you need the BIG-IP to parse the XML, look for specific content, and/or route the traffic based on the presence of the XML or some value within?

       

    2. You say "cloud then send response back to the internal XDM server". Does that mean that the XDM server was the original requester? If so, are you asking about persistence?

       

  • spalande's avatar
    spalande
    Icon for Nacreous rankNacreous
    Sep 30, 2013

    Hi Stewart, 1. Yes, need F5 to parse the XML, XML profile can do this job. Based on XML value need to direct it to the cloud server. 2. Original requester here is some third party IDS tools (web client https requests) these requests are special provisioning requests for third party. this would land on the already configured VS which is for normal provisioning requests. Requests with XML for PAM should go to cloud server and come to internal XDM server for creation of those profiles.