Forum Discussion

yogesh_gaikwad_'s avatar
yogesh_gaikwad_
Icon for Nimbostratus rankNimbostratus
Oct 17, 2015

Modifying http and tcp parameters while transferring services from ACE to F5

I have below config on the ACE. And these parameters are used in the two VIPs as below. So how can i configure similar on the F5 LTM. The behavior of these parameters is explained below.

 

parameter-map type http ILM-HTTP header modify per-request length-exceed continue

 

parameter-map type connection ILM-TCP slowstart set tcp mss min 536 max 1380 no random-sequence-number exceed-mss allow

 

class ekj-443 loadbalance vip inservice loadbalance policy ekj loadbalance vip icmp-reply appl-parameter http advanced-options ILM-HTTP ssl-proxy server elakekasittelyjarjestelma.ilmarinen.net connection advanced-options ILM-TCP

 

class ekj-80 loadbalance vip inservice loadbalance policy ekj loadbalance vip icmp-reply appl-parameter http advanced-options ILM-HTTP connection advanced-options ILM-TCP

 

  • Modifing http headers (insert, delete, rewrite) on every HTTP request or response
  • If cookies, HTTP headers, and URLs exceed the maximum parse length size continue load balancing.
  • slowstart enabled - slow start algorithm is a congestion avoidance method in which TCP increases its window size as ACK handshakes arrive. It operates by observing that the rate at which new segments should be injected into the network is the rate at which the acknowledgments are returned by the host at the other end of the connection.
  • maximum segment size - minimum 536 bytes maximum 1380 bytes
  • disabled sequence number randomization for Layer 4 flows - randomizing TCP sequence numbers adds a measure of security to TCP connections by making it more difficult for a hacker to guess or predict the next sequence number in a TCP connection
  • permit segments that exceeds the configured maximum segment size (MSS)
No RepliesBe the first to reply