Forum Discussion
dennypayne
Employee
Oct 13, 2006Match across services persistence w/rule
I have read in several threads that you cannot directly call "match across services" from a persist command in an iRule.
I have converted a v4 configuration that had several rules that ended up like this:
when CLIENT_ACCEPTED {
if { [server_port] == 6366 } {
use pool sftp-ics11.6366
}
elseif { [server_port] >= 6367 and [server_port] <= 6415 } {
use pool sftp-ics11.0
}
else {
discard
}
}
The previous config had globally enabled match across services so that any connections to those multiple ports would be sent to the same node.
On the virtual that uses this rule, if I enable a default persistence profile inheriting from source_addr, with Match Across Services checked, will that still take care of traffic that is processed through this rule? If not I need to take care of this within the rule somehow.
I tried this:
when CLIENT_ACCEPTED {
if { [server_port] == 6366 } {
use pool sftp-ics11.6366
}
elseif { [server_port] >= 6367 and [server_port] <= 6415 } {
persist SFTP1800
use pool sftp-ics11.0
}
else {
discard
}
}
where SFTP1800 is the same profile I selected as default, and I get an error saying the persist command must be one of cookie, source_addr, etc. So if I can't call a profile and I can't do match across within the rule, how can I solve this if the default profile won't handle it?
Thanks,
Denny
- dennypayne
Employee
I think the OTCU hosed me here....Oct 15 05:30:57 tmm tmm[1058]: 01220001:3: TCL error: Rule SFTP_ICS.rule - Error: No serverside connection established (line 1) invoked from within "server_port" Oct 15 05:30:57 tmm tmm[1058]: 01220001:3: TCL error: Rule SFTP_ICS.rule - Error: No serverside connection established (line 1) invoked from within "TCP::server_port"
- hoolio
Cirrostratus
Hi Denny, - dennypayne
Employee
Well, let me add that the rule is tied to a port 0 VIP, but TCP::local_port should still return the port that the client is actually asking for, correct? - unRuleY_95363Historic F5 AccountHey Denny,
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects