For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_Pimlott_61's avatar
Mike_Pimlott_61
Icon for Nimbostratus rankNimbostratus
Nov 28, 2006

Limit connections to node IP after load balancing

Hi     I have been trawling through the examples on the site and seem to have tried everythin to no avail.     I am trying to generate an iRule that will monitor the connections to a NODE ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 28, 2006
Actually... it looks like there is a bug with iRules and the FastL4 profile:

 

 

 

CR61257

 

 

Several rule commands are broken for SERVER_CONNECTED with a fastL4 virtual. The problem is that the SERVER_CONNECTED event is raised before there is a serverside filter context.

 

 

 

This will be fixed in 9.4. If you want to, you can request via support to have this included in past versions. Else, the LB::server addr workaround should get you the data you want.

 

 

The oddities you were seeing with connection counts might be a result of connections not being closed cleanly. Such connections would be reaped by BIG-IP based on the idle timeout configured in the TCP profile associated with the VIP. You can view the global current connections and their idle timeouts using 'b conn show all'. Check the 'b conn help' output for filtering options. Else, you can use b virtual to get stats for the VIP.

 

 

Aaron