For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

F5-Hopeful's avatar
F5-Hopeful
Icon for Nimbostratus rankNimbostratus
Oct 10, 2019

Session table with Virtual Command

Is anyone able to tell me if you can store data in the session table using an iRule on one VS then recover it on a second VS, if the second VS is called via the virtual command in an iRule on the fir...
application delivery
BIG-IP
iRules
virtual command
F5-Hopeful's avatar
F5-Hopeful
Icon for Nimbostratus rankNimbostratus
Oct 14, 2019

Hi, thank you for your code above, the only difference is that I am not using HTTP, the flow I have is for FTPS so I am adding the info to the table in CLIENT_ACCEPTED in the first iRule then retrieving it in CLIENT_ACCEPTED in the second iRule, and I don't call the second VIP in client accepted, it is in CLIENT_DATA. I have also tried to add the data to the table in CLIENT_ACCEPTED but this did not work either. I pasted your config into my both iRules under CLIENT_DATA of both iRules, I also put the logging into both iRules and as you can see from the output below I am able to get the data from within the iRule that put it in the table but not from the second iRule.

 

iRule 1

Oct 14 21:47:25 ip-10-0-0-200 info tmm[9777]: send to virtual vs-test-02

Oct 14 21:47:25 ip-10-0-0-200 info tmm[9777]: result is blocked

 

iRule 2

Oct 14 21:47:25 ip-10-0-0-200 info tmm[9777]: result is 

 

I am using AWS F5 BIG-IP Virtual Edition instances, I don't know if this is what is causing the issue as everything I have read says it should work, and as you displayed above it is clearly working for you.