For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

moudini_63759's avatar
moudini_63759
Icon for Nimbostratus rankNimbostratus
Nov 11, 2011

OSPF + iRule

Hi,

 

 

We recently configured OSPF and removed static routes, 1 problem we found is that some iRule uses the default gateway IP address and since this changed we needed to provide the OSPF assigned one.

 

 

This creates a discrepancy between the active and standby node because OSPF provides a different def. gateway to each and we cannot synchronize the configs anymore.

 

 

A solution I think would be to refer to something like "OSPF::default-gateway" but I cannot find any similar references....?

 

 

 

Thanks to anyone taking the time.

 

 

Cheers,

 

 

Moudini

 

 

 

application delivery
dev
devops
iRules

4 Replies

  • Kurt_Knochner_5's avatar
    Kurt_Knochner_5
    Icon for Cirrus rankCirrus
    Nov 11, 2011
    Hi,

     

     

    can you please show how the iRule was using the default IP address? Maybe, we can then develop an alternative.

     

     

    Regards

     

    Kurt Knochner
  • moudini_63759's avatar
    moudini_63759
    Icon for Nimbostratus rankNimbostratus
    Nov 14, 2011
    Sure, this is it, simple really.

     

     

    when CLIENT_ACCEPTED {

     

    SSL::enable serverside

     

    node 10.233.22.21 443

     

    }

     

     

    10.233.22.21 is the next hop address on the active node and 10.233.22.29 on the standby

     

     

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Nov 14, 2011
    Not elegant, but I wonder if you could create a data group which maps the LTM hostname to a gateway IP address:

    
class host_to_gw_class {
   {
      "ltm1.example.com { "10.233.22.21" }
      "ltm2.example.com { "10.233.22.29" }
   }
}

    And then use an iRule like this to set the gateway:

    
when CLIENT_ACCEPTED {
   SSL::enable serverside
   node [class match -value [info hostname] equals host_to_gw_class] 443
}

    Aaron
  • moudini_63759's avatar
    moudini_63759
    Icon for Nimbostratus rankNimbostratus
    Nov 28, 2011
    Hi Aaron,

     

     

    Thanks for that idea, will try this out soon and report back.

     

     

    Cheers,

     

     

    Moudini