Forum Discussion
JasonHeffner_71
Nimbostratus
NimbostratusProxyPass redirect problem
I'm having some strange issues with proxypass and redirects. I have proxypass setup as follows
/login some.server.edu/login connectstagingapp
/manage some.server.edu/manage connectstagingapp
and generally this works as expected. However when I attempt to do a response.redirect in asp which is behind proxypass to a url outside on the same server, the BigIP will continue to serve files through proxypass for all urls on the host, even those that aren't specifically listed in the Data Group List.
The stranger thing this is dependent on browser, where this is the case on Firefox and IE, Safari will correctly handle the redirect.
Does anyone have an idea what might be causing this?
Thanks
JasonHeffner_71I tried your changes above and the same behavior still happens. I do have time to troubleshoot this, so I may go digging as well. Someone mentioned just using some simple HTTP classes so might look into that first.
I'm still not certain why it would consistently work in one browser(Safari) and none of the others. It must be something with the cookies or the HTTP Headers.- JasonHeffner_71Still no joy.. I replaced the smileys and the [virtual] with [virtual name] since I'm running BIG-IP 9.3.1 Build 37.1
hooleylistCirrostratus
Can you post an anonymized copy of the VIP config (b virtual VIP_NAME list), the iRule configuration parameters from RULE_INIT and logs of the failure with debug set to 2?
Thanks,
Aaron- JasonHeffner_71I was reading your mind.. Here is a failure.
- hooleylistSorry, can you uncomment the section for SERVER_CONNECTED? Also, if you're not rewriting the response content using a stream profile you can set ::rewrite_response_payload to 0 in RULE_INIT.
Thanks,
Aaron - JasonHeffner_71Here is the new log. At the end of the failure I continued to hit reload a few times as it went to the wrong pool. I then waited about 4 minutes and hit reload and the system went to the correct page.
This should show the actual problem well. It seems that I get a new and it then everything works normally, but right before that it was still sending me requests from the wrong server. - hooleylistI think I found the problem. I edited the post above. Can you retest the updated iRule?
I had forced the pool selection to use the default pool if the request matched a class line that didn't have a pool specified. But for requests which didn't match any class lines, the rule was being exited before that pool selection logic was done. Because the default pool on the VIP isn't used if another pool was already selected on a prior request on the same TCP connection, the keep-alive requests were going to the previously selected pool. UnRuleY explained it a bit more clearly in this post (Click here).
Aaron - JasonHeffner_71That did it!! Awesome Job! I'm glad I was able to help improve the code. If you need any more debugging or testing let me know.
Jason - JasonHeffner_71I can close the call I had open.
- hooleylistGreat to hear. Thanks for the help testing.
Aaron