For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

benoit_9199's avatar
benoit_9199
Icon for Nimbostratus rankNimbostratus
Mar 05, 2009

persist source_addr in iRule ... doesn't persist

Hi, I have the following iRule: when HTTP_REQUEST { if { [HTTP::uri] ends_with "/" or [HTTP::uri] contains "cgi-bin/" or [HTTP::uri] contains ".dyn" } { dynamic conte...
application delivery
dev
devops
iRules
Deb_Allen_18's avatar
Deb_Allen_18
Historic F5 Account
Mar 09, 2009
Check out AskF5 SOL9628: The BIG-IP system does not update a virtual server's CMP status Click here

 

 

We've just observed the same issue with iRules which invoke the session command.

 

 

It apparently can happen both when updating iRules from the GUI or CLI or via iControl: Until the new configuration is actually loaded (b load or Update on the affected virtual server config in the GUI), the bigpipe parser has not yet run against the new virtual server configuration. Once it does, the VS is appropriately demoted. Until then, although the CMP-incompatible iRule has been added to the running config, the VS is not demoted. Connections are distributed across all TMMs, & global values such as session table & global vars are instantiated and maintained separately on all TMMs.

 

 

Working on a solution update to include more specific information on this phenomenon. The CR mentioned only seems to have dealt with the global var handling, so will be following up on session /rateclass / anything else that might not forcing demotion when added via iRules.

 

 

/d