For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

h_elyot's avatar
h_elyot
Icon for Nimbostratus rankNimbostratus
Mar 22, 2019

OpenShift : iRule for redirecting to Status URL if PODs are unreachable

Dears, We would like to redirect traffic to an external status page if the PODs in our Openshift environment are unreachable. In the ASM config, the members of the related pools are the openshift r...
ASM Advanced WAF
BIG-IP
cloud
devops
irule
AMiles_377865's avatar
AMiles_377865
Icon for Cirrocumulus rankCirrocumulus
Mar 26, 2019

Hello Elliot,

 

That looks reasonable. The only thing I am a little uncertain of is the exact response a downed POD will make to the F5, which is why I might consider triggering the irule from a monitor instead of the HTTP response event. That way, if your F5 registers all pool members are down, users will be directed straight to the status page.

 

Best of luck,

 

Austin

 

h_elyot's avatar
h_elyot
Icon for Nimbostratus rankNimbostratus
Apr 03, 2019

Hi Austin,

Thank you for the reply. Regarding the code itself, I should probably use { if { [HTTP::status] contains "503"} instead of { if { [HTTP::status] contains "404"} Now about triggering the iRule from a monitor,I thought about your idea but I am not sure it will work because monitors do not currently return any information to iRules other that up/down status of the pool. As the pool members are the network interfaces of the Openshift routers and not the Openshift PODs themselves, the result could be misleading.

Regards