For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

scott_doty_2411's avatar
scott_doty_2411
Icon for Nimbostratus rankNimbostratus
Sep 30, 2006

Performance (HTTP) Profile

So I have a VIP, myvip1.company.com that is set up as a Performance HTTP VIP. I have multiple applications that point to this VIP. The VIP basically checks AD to see if an email address is valid and...
application delivery
dev
devops
iRules
Colin_Walker_12's avatar
Colin_Walker_12
Historic F5 Account
Oct 09, 2006
Well, there are definitely different behaviors between a standard HTTP or TCP VIP and a performance HTTP VIP. If it's not too sensitive, why is it that you can't change this to a normal VIP at this point?

 

 

As it is, you could probably use the CLIENT_ACCEPTED event and the TCP::respond commands to work around this. I.E. perform the IP check in the CLIENT_ACCEPTED event, and if it matches the address in question, send back a custom crafted response with a redirect pointing them to the new VIP.

 

 

HTH,

 

Colin