Simple Rule ? (I think)

Sorry I meant "Classes".

First, I think you want to test the http_host not the http_uri.

If there is a single substring which identifies the pool to select,

use a simple "contains" operator:

 
 rule myrule { 
    if (http_host contains "myweb") { 
       use pool pool1 
    } 
    else if (http_host contains "bobweb") { 
       use pool pool2 
    } 
    else { 
       use pool pool3 
    } 
 } 
 

On the other hand, if there are multiple substrings which identify the

pool to select, use a "contains one of" operator:

 
 class their_class { 
     "bobweb" 
     "danweb" 
 } 
 class our_class { 
     "yourweb" 
     "myweb" 
 } 
  
 rule myrule { 
    if (http_host contains one of our_class) { 
       use pool pool1 
    } 
    else if (http_host contains one of their_class) { 
       use pool pool2 
    } 
    else { 
       use pool pool3 
    } 
 } 
 

Thanks for your answer gumby. I was looking in the documentation and I wanted to make sure I understand the diff between the http_uri and http_host.

 

 

Is the following correct?

 

Actual URL = http://www.myweb.com/test.asp

 

HTTP_HOST = www.myweb.com

 

HTTP_URI = test.asp

 

 

If this is correct then I can definitely use the http_host to decide which of the 3 groups the request should be forwarded to via classes. Your second example is closer to my requirements; I have 30 domains that are forwarded to 3 different pools depending on the actual domain. Then I also have an instance where there might be the "test.asp" at the end of the URL and I can use the http_uri to make that decision once I get it into the correct group.

 

 

You should see the requirements that I have for this project, just trying to take it one step at a time. LOL

 

 

Thanks again...

 

Almost correct.

 

Your http_uri is /test.asp.

 

 

Take a look using:

 

tcpdump -X -s 1600 -i external port http

 

 

Good luck and let me know if you have trouble with your mondo configuration.

 

Nope, it's not possible to parse encrypted traffic.

 

So, you'll need to configure an SSL decryption proxy which targets

 

your http virtual (probably on a loopback address). Read the SSL Accelerator Proxies section of your Reference Guide for more details. Once you have the traffic decrypted then, yes, more than one virtual can reference the same rule.