For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Teff's avatar
Teff
Icon for Nimbostratus rankNimbostratus
Apr 20, 2018

Match Across Services irule on wildcard VS

Good afternoon,

I have been digging through the forums trying to find more examples of an irule that can match across services with a VS/Pool using */0. I need to match 4 ports, the customer does not want 4 VS/Pools to accomplish this.

I'm trying to build off this little example, but I am unsure of the right cmds to direct all 4 ports, if seen, to the same pool member. I do not want it to discard

when CLIENT_ACCEPTED { if { [TCP::local_port] >= 18620 and [TCP::local_port] <= 18623 } { persist sticky [1800] use pool my_pool

    }
}

1 Reply

  • Teff's avatar
    Teff
    Icon for Nimbostratus rankNimbostratus

    I forgot the else portion, but I'm unsure this would actually match across ports. The incoming client should be directed to the same pool member regardless. Does a sticky persistence setting on the pool do this even when wildcard? Maybe I'm making it too complicated.

    when CLIENT_ACCEPTED { if { [TCP::local_port] >= 18620 and [TCP::local_port] <= 18623 } { persist sticky [1800] use pool my_pool

        }
        else {
        pool my_pool
    }