need help figuring out a proxy irule

Hey Derek,

 

 

Well, welcome to the fold! You're definitely diving in with both feet, it seems like. It sounds to me like you've got the configuration mostly settled. For reference, here is the data group that I used

 

 

"www.testsite.com" := "www.realsite.com",

 

"imgs.testsite.com" := "imgs.realsite.com pool-images",

 

 

We configured ":=" as the delimiter in the Data Group, though I can't quite recall if we had a specific reason for doing this or not. I also seem to recall that we made some modifications to allow us to make some of the specific changes that we were looking for, but I believe those specifically related to changing the host header after the WAM had inspected it.

 

 

If I understand your comments correctly, your data group will take requests for www.domain.com/somestring and send them to the blog_pool while changing the host header to blog3.domain.com. I'm not certain, but I believe that the /somestring/ path will be removed when it is sent to the blog_pool servers as blog3.domain.com - is that the expected/desired behavior?

 

 

Also, the OneConnect profile is largely to be sure that each request is processed by the iRule. With no OneConnect profile only the first request on each connection is processed. This can become a big problem with Keep-Alive connections and/or things like content delivery networks. You might want to read up on its functionality to see what else it does (though it *probably* won't break anything - especially if it's already on) before flipping it on your primary production virtual server.

 

 

You might also want to look at priorities ( http://devcentral.f5.com/wiki/default.aspx/iRules/priority.html ) to be sure that the /admin/ protect rule is processed before the ProxyPass rule - that could cut out some processing time. I don't remember the exact behavior when two rules of the same priority execute on the same event. I believe the order of processing is whatever order they are listed as in the config. (Though this could be complete nonsense - I don't really remember what happens on collision.)

 

 

// Ben