For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Mar 02, 2021
Solved

On an LTM virtual server, does i-rule processing preceed the connection profile or is it the other way around?

Hi;

 

Let's say we have a load balancing virtual server listening on port 80, and let's say that we define a connection profile on it, which forces the http traffic to move to an internal virtual server.

 

Also, on the "External virtual server" listening on port 80, we have bound an i-rule to it.

 

My question is: does i-rule processing preceed the connection profile processing or is it the other way around?

 

Kindly

Wasfi

application delivery
iRules
LTM

3 Replies

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Mar 02, 2021

    what exactly do you mean with a connection profile? the APM one or OneConnect?

     

    in any case it depends on the iRule event, some trigger earlier, some later, have a look at:

     

    https://clouddocs.f5.com/training/community/irules/html/class1/module1/iRuleEventsFlowHTTPS.html

  • Wasfi_Bounni's avatar
    Wasfi_Bounni
    Icon for Cirrocumulus rankCirrocumulus
    Mar 03, 2021

    Sorry Boneyard. I meant a connector profile, which can be used to relay the http request to an internal virtual server. It seems like the external virtual server can only process irules with client_accepted events prior to sending the connection via the connector profile to the internal virtual server. It does not seem like an irule with a http_request event can be processed prior to sending the connection via the connector profile.