For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

h_elyot's avatar
h_elyot
Icon for Nimbostratus rankNimbostratus
Mar 22, 2019

OpenShift : iRule for redirecting to Status URL if PODs are unreachable

Dears, We would like to redirect traffic to an external status page if the PODs in our Openshift environment are unreachable. In the ASM config, the members of the related pools are the openshift r...
ASM Advanced WAF
BIG-IP
cloud
devops
irule
KarimBenyelloul's avatar
KarimBenyelloul
Icon for Cirrostratus rankCirrostratus
Apr 03, 2019

Hi,

 

The issue with your iRule is that is doesn't not take into consideration the health status of your pool members.

 

I would suggest this: in the HTTP profile there is a property called "Fallback Host". When all your pool members are marked down by the monitor assigned to the pool, the bigip will send a 302 response.

 

Many thanks,

 

Karim

 

  • h_elyot's avatar
    h_elyot
    Icon for Nimbostratus rankNimbostratus
    Apr 03, 2019

    Hi Karim,

     

    Thanks for the suggestion. So using http://www.statuspage.com as Fallback Host in the profile should do the job, instead of using a iRule, if I understand well?

     

    Regards

     

  • KarimBenyelloul's avatar
    KarimBenyelloul
    Icon for Cirrostratus rankCirrostratus
    Apr 03, 2019

    Hi,

     

    Yes, the fallback host will redirect client only in the following situations :

     

    • A pool member is not chosen (the system failed to select a pool or a pool member, or no pool members were available).

       

    • A pool member is unreachable (when no route to the target exists).

       

    • A pool member is unresponsive (resets a connection request).

       

    • A pool member closes an established connection before the request is sent.

       

    More info here : https://support.f5.com/csp/article/K6510

     

    Many thanks,

     

    Karim