For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stefan_Klotz's avatar
Stefan_Klotz
Icon for Cumulonimbus rankCumulonimbus
Jun 08, 2011

persist lookup with any virtual option

Using the following command: [persist lookup source_addr "[IP::client_addr] any virtual" node] What happend if there a multiple entries in the persistence table for the same source address? I ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 09, 2011
Source IP persistence maps the client IP to a pool name and member IP:port. So it won't work if the pool members are different. Browsers will ignore a cookie set for one domain (example1.com) when they requested a different domain (example2.com). Just to clarify, are the two FQDNs different subdomains (sub1.example.com and sub2.example.com) on the same domain? If so, the cookie idea would work if you set the domain on the cookies to .example.com.

 

 

Another option if the domains are different would be to do manual tracking of the client IP to pool member mapping using a subtable for 10.1.0+. Subtables are global objects which are accessible from any virtual server's iRule.

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/table

 

http://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/2375/v101--The-table-Command--The-Basics.aspx

 

 

Aaron