For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 04, 2013

One question that I have is what if the clients comes behind a NAT device? It will not affect the persistence? I mean, if several clients comes from behind a NAT device, they will have only one IP address. These will not be treated as one client and persist all to the same member?

 

Source IP address isn't used in persistence here, just the cookie sent from the client.

 

Another question: how the value of the cookie is different anytime? I'm asking because we have 2 static values: the server IP and the key.

 

The key in the iRule is just an encryption passphrase. It isn't technically required, but probably better that you encrypt the cookie data so that it isn't viewable in the wild. For the sake of simplicity, you'd create two versions of this iRule - one for the HTTP VIP and one for the HTTPS VIP, where you change the name of the pool and the port number in the pool command. The key should stay the same.