Forum Discussion
Angelo
Nimbostratus
NimbostratusMutiple i-rules on one VS
Hi
I have a request from a client to create a VS with two rules that need to be aplied to it.. one if traffic comes in on http i should send it to a specific pool if traffic comes in as http i should send it to another pool, thats working the second part is the problem if traffic comes in the /apps* on http send it to a third pool, if traffic comes in on https for /apps* send it to a fourth pool.. i'm not sure how to do this....
29 Replies
AngeloHi
the problem is that i now got https working http not working... this is the VS, don't know if there is something wrong on it...
ltm virtual vs_mwgen_dev {
destination 10.217.235.25:any
ip-protocol tcp
mask 255.255.255.255
partition CMRB
profiles {
/Common/http { }
/Common/mtn.co.za {
context clientside
}
/Common/serverssl-insecure-compatible {
context serverside
}
/Common/tcp { }
}
rules {
I-rule_MWGen_dev
/Common/CRM
}
snat automap
vlans-disabled
}- nitass
Employee
have you disabled serverssl (SSL::disable serverside) when using http pool?
SSL::disable wiki
https://devcentral.f5.com/wiki/iRules.ssl__disable.ashx - AngeloHi Nitass
not working i'm getting a error
Server Hangup
don't know what it means...LOL - nitasscan you post the latest configuration?
tmsh list ltm virtual (name)
tmsh list ltm pool (name)
tmsh list ltm rule (name) - Angelobut the error changed so i'm getting somewhere.. LOL
- Angelobut the error changed so i'm getting somewhere.. LOL
- Angelo
Hi
the VS
destination 10.217.235.25:any
ip-protocol tcp
mask 255.255.255.255
partition CMRB
profiles {
/Common/http { }
/Common/mtn.co.za {
context clientside
}
/Common/serverssl-insecure-compatible {
context serverside
}
/Common/tcp { }
}
rules {
I-rule_MWGen_dev
/Common/CRM
}
snat automap
vlans-disabled
}
the rule
if { (([string tolower [HTTP::uri]] starts_with "/ppms") or ([string tolower [HTTP::uri]] starts_with "/smartwizard-proxy")) } {
if { $is_ssl } {
pool pool_MWGen_dev_backup_https
} else {
SSL::disable serverside
pool pool_MWGen_dev_backup
}
}
elseif { $is_ssl } {
pool pool_MWGen_dev_https
} else {
SSL::disable serverside
pool pool_MWGen_dev
}
}
}
the pools
root@fa-dc-f5-01(Active)(/CMRB)(tmos.ltm) list pool pool_MWGen_dev_backup
ltm pool pool_MWGen_dev_backup {
members {
zaflplmwgenmm01:37101 {
address 10.217.229.4
session monitor-enabled
state up
}
zaflplmwgenmm02:37101 {
address 10.217.229.5
session monitor-enabled
state up
}
}
monitor /Common/tcp
partition CMRB
}
members {
zaflplmwgenmm01:37102 {
address 10.217.229.4
session monitor-enabled
state up
}
zaflplmwgenmm02:37102 {
address 10.217.229.5
session monitor-enabled
state up
}
}
monitor /Common/tcp
partition CMRB
} - nitassare pool_MWGen_dev_backup and pool_MWGen_dev pools running http?
ssievers_87378Posted By nitass on 10/24/2012 02:08 AM
have you disabled serverssl (SSL::disable serverside) when using http pool?
SSL::disable wiki
https://devcentral.f5.com/wiki/iRules.ssl__disable.ashx
I think its client side. If the VS accepts both http and https traffic, you have to provide the pool with a SSL profile. For this, you may use SSL:disable when the traffic comes on port 80.Regards,
Sören
- AngeloHi Nitass
Yes they are http
