Forum Discussion
KellyS_50017
Nimbostratus
Dec 20, 2008Profile vs iRule, case sensitivity, persistence
Super-simple question, as I'm pretty new to the F5's.
We have a single sign on piece to our web site that requires the node that issued the SSO token to be the node that redeems the to...
KellyS_50017
Nimbostratus
Dec 22, 2008Thanks for the reply and the re-work of my iRules - I tried it in our test env and it works great. I plan on putting this into Prod later today.
I'll explain a hair more - 99% of our traffic goes against a regular pool. 1% of our traffic comes in through this single sign on applet, and the node that issues the token has to be the node that redeems the token. The client using this the most doesn't have the same machine ask for & redeem the tokens - one server asks for the token, then passes it to another workstation to redeem it. So I needed a way to funnel all this SSO traffic to a single node, yet try to have some sort of HA available if the node goes down.
I duplicated the pool the website runs on (adding _SSO to the end of the name) and turned on priority activation, and gave each node a number.
Is there a better way to accomplish this?
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects