iRules working for BIGIP LB firepass

Hi，All

 

I had use bigip to loadbalance our firepass, and using sourceIP persistant to keep one user to one firepass. Everything is ok except some ADSL users. For ADSL user, maybe their line is not stable, so that they may disconnected and reconnected (their source ip will changed), though our firepass can ignore the source ip change and only check the ssl ID, but our bigip can't do so , and re-send the client to another firepass.

 

So, I need one iRules to combine two persistant SSL ID and SourceIP. When client new connection come in, first we will check SSL ID ,if the SSL ID had been persistant,BIGIP will send to same SSL ID server.This can support the adsl client reconnected with a new IP. Second, if no ssl id ,we will check sourceIP persistant, if had record sourceip, send to the same sourceip server. This can support client IE browser establish new ssl session. Third, if there neighter ssl id or sourceip persistant , we do loadbalance.

 

Can this be working? Dose anyone can give some suggestion?