For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Parveez_70209's avatar
Parveez_70209
Icon for Nimbostratus rankNimbostratus
Jul 15, 2014

Maintenance-Irule Issue keeping SSL::disable serverside" intact

Hi,

Currently we have the below Maintenance-Irule in place which is pointing towards a Pool:maintenance_page which is holding the Maintenance Page-holding server:172.27.60.240:80

But the problem is that this Maintenance-Pool server don't work always, so we are trying to remove this Maintenance-Page server and put some-kind of banner Irule which LB can publish:

when HTTP_REQUEST { if { [active_members [LB::server pool]] <= 0 } {

    SSL::disable serverside
    pool maintenance_page
}

}

================= Plan is to edit the above Irule with the below contents keeping :SSL::disable serverside" intact. Kindly suggest:

when HTTP_REQUEST { Check active members of pool, if 0 respond with Apology Page. if { [active_members test-rpm] <=0 } { HTTP::respond 200 content {

The JDA site you are attempting to access is currently unavailable due to system maintenance.

Please try the site again in a few minutes. We apologize for any inconvenience this may create.

If you need to reach us, please call 1-469-357-6900 or email RP-RPS-Hosting-OnCall@jda.com.

Sincerely,

JDA Cloud Services 

   }

} }

Thanks and Regards Parveez

application delivery
devops
iRules

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Jul 16, 2014

    Perhaps something like this:

    when CLIENT_ACCEPTED {
    set default_pool [LB::server pool]
}
when HTTP_REQUEST {
    if { [active_members $default_pool] < 1 } {
        if { [active_members maint_pool] < 1 } {
            HTTP::respond 200 content "...html maintenance content..."
        } else {
            SSL::disable serverside
            pool maint_pool
        }
    }
}