Hi, Need your assistance into this topic related to Irule Based on Data-Groups: Currently we have total 120 Virtual-Servers( 60 HTTP profiles + 60 HTTPS Profiles) created into the Load-Balancer for single customer.And into every profile they specified/attached the below Irule: Let’s say For HTTP Profile Irule: when CLIENT_ACCEPTED { set default_pool [LB::server pool] log local0. "Default pool [LB::server pool] set" log local0. "Client IP is [IP::remote_addr]" } when HTTP_REQUEST { set https_uri [string tolower [HTTP::uri]] log local0. "requested [HTTP::uri]" if {$https_uri equals "/" } { HTTP::redirect "https://parveez.com" pool pool_parveez.com log local0. "redirected from /" return } elseif { $https_uri starts_with "/iss_static" } { log local0. "matched /iss_static" pool pool_confarmsp.leni2.com_http log local0. "pool_confarmsp.leni2.com_http defined, [LB::server pool] selected" return } elseif { $https_uri starts_with "/"} { log local0. "URI starts with /" pool pool_apuat_leni2.com_http log local0. " pool_apuat_leni2.com_http defined, [LB::server pool] selected" return } else { log local0. "no match for rev. close connection" pool pool_apuat_leni2.com_http } } Just to give you a brief about the Irules, the client got two kinds of pages; One is Static content which is specified by "/iss_static" , while else option is for Dynamic content which is identified by entry /SEUILibrary/ which consists of many options inside. Now requirement is to add/edit such an irule using Data-Groups so that when the user hits the Virtual-Server, it will automatically understand based on the "/iss_static" or else going to the pool and understands it as /SEUILibrary/ for dynamic content, into the same Data-groups it automatically should understand which pool to go BY SEEING its name. For example: Lets say we have three Virtual-servers: www.abc.com-HTTP ------ Pool named as : pool-abc.com-HTTP www.def.com-HTTPS ------ Pool named as : pool-def.com-HTTP www.ghi.com-HTTPS ------ Pool named as : pool-ghi.com-HTTP So, these got an Irule with "/iss_static" : for static page content and if not it will go for /SEUILibrary/ for dynamic page content.So, basically we are looking for an Irule using Data-Group which contains "/iss_static" and /SEUILibrary/ and also when this Irule is attached to the Virtual-server it will automatically should send which pool to Go by comparing the common parameters like abc Virtual-server which is matching with abc named pool( nomenclature is same: Virtual-server: www.abc.com-HTTP and Pool: pool-abc.com-HTTP), so in the above Irule we wanted to remove the pool part and to introduce Data-Group. So, breaking the Irule: The below part will remain same: when CLIENT_ACCEPTED { set default_pool [LB::server pool] log local0. "Default pool [LB::server pool] set" log local0. "Client IP is [IP::remote_addr]" } when HTTP_REQUEST { set https_uri [string tolower [HTTP::uri]] log local0. "requested [HTTP::uri]" if {$https_uri equals "/" } { HTTP::redirect "https://parveez.com" pool pool_parveez.com log local0. "redirected from /" return After this part it should use the Data-group which will replace the pool part from Irule and replaced the same by Data-Group } elseif { $https_uri starts_with "/iss_static" } { log local0. "matched /iss_static" pool pool_confarmsp.leni2.com_http log local0. "pool_confarmsp.leni2.com_http defined, [LB::server pool] selected" return } elseif { $https_uri starts_with "/"} { log local0. "URI starts with /" pool pool_apuat_leni2.com_http log local0. " pool_apuat_leni2.com_http defined, [LB::server pool] selected" return } else { log local0. "no match for rev. close connection" pool pool_apuat_leni2.com_http } } Thanks and Regards Parveez

Let me tackle the easy part - mapping the virtual name into a pool name; Choose pool base on virtual name, checking for an error if {[catch {pool [string map {"www." "pool-" "HTTPS" "HTTP"} [virtual]]}]} { log local0. "pool [string map {"www." "pool-" "HTTPS" "HTTP"} [virtual]] not configured" } Unfortunately I cannot quite understand what it is you want to do with the data-group. They are simple but I am somewhat confused by the explanation above.

Hi, Please allow me to explain this again: Basically idea is to apply a single Irule into all the 120 Virtual-servers(60 HTTP+ 60 HTTPS), Which will intelligently identify whether it should go to Static page("/iss_static") or if thats not matching , it will go to /SEUILibrary/ which is for Dynamic Page content. : sample HTTP Irule which is currently attached to all HTTP Virtual-servers is pasted below again: when HTTP_REQUEST { set https_uri [string tolower [HTTP::uri]] log local0. "requested [HTTP::uri]" if {$https_uri equals "/" } { HTTP::redirect "https://parveez.com" pool pool_parveez.com log local0. "redirected from /" return } elseif { $https_uri starts_with "/iss_static" } { log local0. "matched /iss_static" pool pool_confarmsp.leni2.com_http log local0. "pool_confarmsp.leni2.com_http defined, [LB::server pool] selected" return } elseif { $https_uri starts_with "/"} { log local0. "URI starts with /" pool pool_apuat_leni2.com_http log local0. " pool_apuat_leni2.com_http defined, [LB::server pool] selected" return } else { log local0. "no match for rev. close connection" pool pool_apuat_leni2.com_http } } So, as per the requirement the new Irule not only identifies the static and dynamic content of the page but also it will identify which pool it should go when it hit the Virtual-server by seeing its name) by using Data-groups or Class groups. Ist part:will remain constant when CLIENT_ACCEPTED { set default_pool [LB::server pool] log local0. "Default pool [LB::server pool] set" log local0. "Client IP is [IP::remote_addr]" } when HTTP_REQUEST { set https_uri [string tolower [HTTP::uri]] log local0. "requested [HTTP::uri]" if {$https_uri equals "/" } { HTTP::redirect "http:www.lenovo.com pool lenovo.com log local0. "redirected from /" return 2nd part: trying to get assistance : a) if we can use Data-groups here which will easily identify the "/iss_static" for static page requirement or else dynamic page requirement(/SEUILibrary/) which is shown by else statement when it is marked to some pool: b) In 2nd part manual pool selection will go off and wanted assistance to replace the same with some kind of class-maps or Data-groups. c) The idea is to easy Management. } elseif { $https_uri starts_with "/iss_static" } { log local0. "matched /iss_static" pool pool_confarmct.leni2.com_http log local0. "pool_confarmct.leni2.com_http defined, [LB::server pool] selected" return } else { log local0. "no match for rev. close connection" pool pool_apbuild.leni2.com_http } } Thanks and Regards Parveez

Explanation still confusing to me but here's one more go - I hope it helps! switch -glob [HTTP::uri] { "/" { Do something - but don't do a redirect followed by a pool selection!! Will break!! HTTP::redirect "https://parveez.com" pool parveez.com } "/iss_static*" { Choose a static pool matching to this virtual pool [class match -element [string tolower [virtual]] starts_with dg_static_pools] return } default { Choose a dynamic pool matching to this virtual pool [class match -element [string tolower [virtual]] starts_with dg_dynamic_pools] return } } Where both dg_dynamic_pools and dg_static_pools are datagroups containing key/value pairs of /. NB1. The iRule will need some modification for v11 - should work v10 NB2. As comment says, you shouldn't do an HTTP::redirect followed by a pool selection

Parveez, I'm still confused as the poolnames chosen for the /iss_static path are all different and you say "3.We want to keep constant the pool marked against iss_static", however as far as the a/b/c examples immediately above, if your naming standard is consistent and as you show above, then I don't think you need a data-group at all to map from your virtual name to your pool name. You can just use the following;- if {[catch {pool "pool_[string map {"-VS-HTTP" "_http" } [virtual]]}]} { log local0. "pool [string map {"www." "pool-" } [virtual]] not configured" } By the way;- elseif { $http_uri starts_with "/" } is ALWAYS going to evaluate to 1 as all paths start with "/".

Forum Discussion

Parveez_70209

Nimbostratus

Nov 06, 2013

Irules Data-Group

Hi,

Need your assistance into this topic related to Irule Based on Data-Groups:

Currently we have total 120 Virtual-Servers( 60 HTTP profiles + 60 HTTPS Profiles) created into the Load-Balancer for single customer.
And into every profile they specified/attached the below Irule:

Let’s say For HTTP Profile Irule:

when CLIENT_ACCEPTED { set default_pool [LB::server pool] log local0. "Default pool [LB::server pool] set" log local0. "Client IP is [IP::remote_addr]" }

when HTTP_REQUEST { set https_uri [string tolower [HTTP::uri]] log local0. "requested [HTTP::uri]" if {$https_uri equals "/" } { HTTP::redirect "https://parveez.com" pool pool_parveez.com log local0. "redirected from /"

                            return

} elseif { $https_uri starts_with "/iss_static" } {

log local0. "matched /iss_static"

pool pool_confarmsp.leni2.com_http

log local0. "pool_confarmsp.leni2.com_http defined, [LB::server pool] selected" return

} elseif { $https_uri starts_with "/"} { log local0. "URI starts with /"

   pool pool_apuat_leni2.com_http

log local0. " pool_apuat_leni2.com_http defined, [LB::server pool] selected" return

            }  else {

log local0. "no match for rev. close connection"

pool pool_apuat_leni2.com_http

}

Just to give you a brief about the Irules, the client got two kinds of pages; One is Static content which is specified by "/iss_static" , while else option is for Dynamic content which is identified by entry /SEUILibrary/ which consists of many options inside.

Now requirement is to add/edit such an irule using Data-Groups so that when the user hits the Virtual-Server, it will automatically understand based on the "/iss_static" or else going to the pool and understands it as /SEUILibrary/ for dynamic content, into the same Data-groups it automatically should understand which pool to go BY SEEING its name.

For example:

Lets say we have three Virtual-servers:

www.abc.com-HTTP ------ Pool named as : pool-abc.com-HTTP www.def.com-HTTPS ------ Pool named as : pool-def.com-HTTP www.ghi.com-HTTPS ------ Pool named as : pool-ghi.com-HTTP

So, these got an Irule with "/iss_static" : for static page content and if not it will go for /SEUILibrary/ for dynamic page content.
So, basically we are looking for an Irule using Data-Group which contains "/iss_static" and /SEUILibrary/ and also when this Irule is attached to the Virtual-server it will automatically should send which pool to Go by comparing the common parameters like abc Virtual-server which is matching with abc named pool( nomenclature is same: Virtual-server: www.abc.com-HTTP and Pool: pool-abc.com-HTTP), so in the above Irule we wanted to remove the pool part and to introduce Data-Group.

So, breaking the Irule:

The below part will remain same:

when CLIENT_ACCEPTED { set default_pool [LB::server pool] log local0. "Default pool [LB::server pool] set" log local0. "Client IP is [IP::remote_addr]" }

                            return

After this part it should use the Data-group which will replace the pool part from Irule and replaced the same by Data-Group

} elseif { $https_uri starts_with "/iss_static" } {

log local0. "matched /iss_static"

pool pool_confarmsp.leni2.com_http

log local0. "pool_confarmsp.leni2.com_http defined, [LB::server pool] selected" return

} elseif { $https_uri starts_with "/"} { log local0. "URI starts with /"

   pool pool_apuat_leni2.com_http

log local0. " pool_apuat_leni2.com_http defined, [LB::server pool] selected" return

            }  else {

log local0. "no match for rev. close connection"

pool pool_apuat_leni2.com_http

}

Thanks and Regards Parveez

Parveez_70209
Nimbostratus
Dec 17, 2013
Hi Sir,

With your constant support and suggestion we modified the Irule and got almost the results, except one last part which is prevailing in 2nd part of the Irule: "/ISS_Static*" , where seems like some /ISS_Static parts are allowing while others are dropping( error 404).

So, seems like 2nd part of the Irule(/ISS_Static) is case-sensitive, so thinking whether we can put something against this which is case-in-sensitive.

So, planning to divide the Irule into three parts by HTTP_REQUEST by replacing the switch -glob syntax:

Sir, how to modify the Final Irule:

===============================================

when HTTP_REQUEST { switch -glob [HTTP::uri] { "/" { log local0. "redirecting from /" if { [class match [virtual] equals Common ] } { HTTP::respond 301 Location [lindex [split [class match -value [virtual] equals Common] ","] 2] pool [lindex [split [class match -value [virtual] equals Common ] ","] 0] log local0. "Went to root ( / ), index 0 - WEC pool after index 2 url set with 301" } else { log local0. "Static pool entry for xxxx[LB::server pool] not created yet" reject } return } "/ISS_Static*" { if { [class match [virtual] equals Common ] } { pool [lindex [split [class match -value [virtual] equals Common] ","] 1] log local0. "Went to default, index 1 - Confarm pool" } else { log local0. "Static pool entry for [virtual] not created yet" reject } return }

default { if { [class match [virtual] equals Common ] } { pool [lindex [split [class match -value [virtual] equals Common ] ","] 0] log local0. "Went to default, index 0 - WEC pool" } else { log local0. "Dynamic pool entry for [virtual] not created yet" reject } return } } }

=============================

Kindly suggest Sir.

Thanks and Regards Parveez
IheartF5_45022
Nacreous
Dec 17, 2013
Sorry I was a bit brief yesterday. As well as adding "string tolower" to the switch subject, you also need to update the switch arms, in this case "iss_static" to use lowercase ie.

switch -glob [string tolower [HTTP::uri]] { "/" { } "/iss_static" { } default { } }

Hope that fixes it for you.
- IheartF5_45022
  Nacreous
  Dec 17, 2013
  Missed the trailing * - "/iss_static*"
Parveez_70209
Nimbostratus
Dec 18, 2013
So Sir you mean like the below : ?

switch -glob [string tolower [HTTP::uri]] { "/" { } * - "/iss_static*" { } default { } }

Thanks and Regards Parveez

IheartF5_45022

Nacreous

Dec 18, 2013

Like this;

switch -glob [string tolower [HTTP::uri]] {
    "/" { 
    } 
    "/iss_static*" { 
    } 
    default { 
    } 
}

Recent Discussions

Under Attack? F5 Will Help You.
Contacting F5 Support?

DevCentral Quicklinks

* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com

Discover DevCentral Connects

* Podcasts
* Social Channels
* Video Streaming

Forum Discussion

Irules Data-Group

Recent Discussions

Background Tasks

APM with EntraID as idP / request signed

Should config via cli rather than gui?

APM Modern Customization - modify Header in user-common.js and form in user-logon.js

Which process is consuming higher CPU

Related Content

Re: Automate Data Group updates on many Big-IP devices using Big-IQ or Ansible

Working with subsets of data-group records via iControl REST

Can I have a data group, with "data group" members

Python script for updating data group

Managing Subsets of Data-Group Records with BIGREST

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS