Forum Discussion

Gustavo_Jardim_'s avatar
Gustavo_Jardim_
Icon for Altocumulus rankAltocumulus
Sep 12, 2018

Remover APM Session after send response for user

Hi;   I have a webservice published with F5 BigIp 13.1.1 and this webservice needs a authentication and SSO. I use de APM to valid the username, password and make de SSO Credential Mapping. This w...
application delivery
BIG-IP Access Policy Manager (APM)
iRules
  • Gustavo_Jardim_'s avatar
    Gustavo_Jardim_
    Sep 12, 2018

    I found the solution I needed add the HTTP Header "Connection: Close" during response of F5 to client.

     

    When the F5 close APM session without "Connection: Close" in HTTP Header, the client will use the TCP Connection for another APM session and the F5 will close the TCP Connection when delete the first APM session.

     

    It is the explanation for I have error when I have load, the client open another APM session using a same TCP Connection.

     

    The best iRule that I make for this example is:

     

    when HTTP_RESPONSE_RELEASE { HTTP::header insert "Connection" "Close" ACCESS::session remove }

     

    Thanks all.

     

Vinne73_96575's avatar
Vinne73_96575
Icon for Nimbostratus rankNimbostratus
Sep 12, 2018

Interesting topic. Unfortunately I don't have a solution, but I am going to do a similar thing very soon. Since I also don't have enough APM sessions (20K), I'm going to only activate APM when a login is requested by the back-end webservers. After logging in I delete the APM session.

 

This works in test, but has not been battle tested.

 

When I put it in production and find useful info regarding your question, I'll come back.