For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eduardo_Saito_1's avatar
Eduardo_Saito_1
Icon for Nimbostratus rankNimbostratus
Apr 17, 2007

Oneconnect

Hey guys,

 

 

 

I'm working on an iRule script that uses a VS + OneConnect profile and I want to enable OneConnect only for a specific set of URIs.

 

 

I was taking a look at the manual and I've found this:

 

 

ONECONNECT::detach - Detaches client-side and server-side connections.

 

ONECONNECT::reuse - Marks a connection for reuse in a server-side connection pool.

 

 

Let me see if I get this straight. The DETACH option flag a connection to not use OneConnect. The REUSE option flag a connection to stay open on the server side for reuse or will it check if there's a previous established connection ready for reuse?

 

 

 

Thanks!

 

 

Eduardo Saito

 

Assistec Integracao - Brazil
application delivery
dev
devops
iRules

4 Replies

  • Eduardo_Saito_1's avatar
    Eduardo_Saito_1
    Icon for Nimbostratus rankNimbostratus
    Apr 18, 2007
    I'm trying this but both are using OneConnect. What I'm trying to do is to use OneConnect except for this specific URI.

    What is wrong?

    when HTTP_REQUEST {
   Pegar URI.
  set tmpUri [HTTP::uri]
   Comparar
  if { $tmpUri eq "/mspetshop/Images/title.gif" } {
    ONECONNECT::reuse disable
    log local0. "URI sem OC: $tmpUri"
  } else {
    log local0. "URI com OC: $tmpUri"
  }
}

    Thanks!
  • Steven_Honson_8's avatar
    Steven_Honson_8
    Icon for Nimbostratus rankNimbostratus
    Jul 22, 2007
    Hi Eduardo,

     

     

    I was just wondering if you had any luck with doing this?

     

    I need to do exactly the same thing (disable oneconnect for a specific section of a application), and am having no luck figuring out how to do it.

     

     

    Thanks,

     

    Steven
  • Eduardo_Saito_1's avatar
    Eduardo_Saito_1
    Icon for Nimbostratus rankNimbostratus
    Jul 23, 2007
    Hi Steven,

     

     

     

    Unfortunately I didn't make that up.

     

    I think that what we are trying to do is to set a layer-4 decision based on a layer-7 value which I don't think it is possible because the connection is already established at the time that the Irule is working. I've tried that same thing but using layer-2 and it worked ok (althought it wasn't the solution I was seeking).

     

     

    Hope that you have more luck than I had and if you figure this out please share with us your solution.

     

     

    Cheers!

     

     

    Eduardo Saito

     

    Assistec Integracao
  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    Jul 26, 2007
    As Eduardo seems to have experienced, I don't believe you can selectively disable OneConnect, especially not in the middle of an active connection.

     

     

    The "ONECONNECT::reuse" command is intended to manage the current connection status for re-use for subsequent requests. Most likely use is for security considerations.

     

     

    The "ONECONNECT::detach" command is intended to detach the server side of the connection without closing the client side. I've never had to use this one: I've used the LB::detach command instead. Useful for re-selecting a server, as OneConnect will force re-selection of the same server otherwise.

     

     

    HTH

     

    /deb