For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

raytoles_75680's avatar
raytoles_75680
Icon for Nimbostratus rankNimbostratus
Nov 10, 2009

Rewrite for another Virtual Server (Cookies and Sessions)

We have to rewrite some requests to one of our virtual servers (vs1) as a directory on another virtual server (vs2). We use the ProxyPass iRule to conduct the rewrite. We're experiencing a problem w...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 10, 2009
Are the BigIpServervs1 and BigIpServervs2 cookies from cookie insert persistence profiles? If it is cookie insert persistence you're using, it's a bit tricky trying to depend on it for persisting clients who have made a request to VS2, created a session on that app and then made a request to VS1's /apa_core URI and been sent to pool2. LTM wouldn't have any idea that the client needs to be persisted to the same pool2 member as the client won't send the persistence cookie from VS2 to VS1.

 

 

I think the simplest fix would be to redirect clients who request /apa_core on VS1 to VS2. I'm not sure this is possible from a client experience perspective, but it would make for a quick fix. If that's not an option, I think you'd need to create a session table entry mapping the client to a specific pool2 member. The problem with this is that the only common part of a client request to VS1 and VS2 I can see is the client IP address.

 

 

Aaron