For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Craig_17766's avatar
Craig_17766
Icon for Nimbostratus rankNimbostratus
Jul 10, 2013

Marking node for maintenance but accessible for testing

Hi all, We have a website over 3 nodes on a virtual server with source persistency. We use a monitor to check for a specific html file to pull the node out for maintenance. The issue I have...
application delivery
dev
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 10, 2013
Not only that, but you could selectively (and dangerously) point to a specific node in the URI:

URI = /?node-select=172.16.16.1.80 ** notice value equals IP.PORT (172.16.16.1 80)** 


when HTTP_REQUEST {
if { ( [IP::client_addr] equals "172.16.32.2" ) and ( [HTTP::uri] starts_with "/?node-select=" ) } {
catch {
scan [lindex [split [HTTP::uri] "="] 1] {%d.%d.%d.%d.%d} ip1 ip2 ip3 ip4 port
node $ip1.$ip2.$ip3.$ip4 $port
HTTP::uri "/"
}
}
}