Forum Discussion
SoL7616: ASM Static Content Bypss
Greetings,
In Sol7616, which uses an iRule to have static content bypass the ASM, one is instructed to create a "static content pool" with the server IP's that deliver static content and associate it with VIP. However, we already have a VIP and pool set up for all of our content, static and dynamic. I am assuming that, given this case, we can use our existing pool in the iRule and not create a new one, but I wanted to verify.
Also, the iRule references "SET_STATIC_HOST_NAME_HERE", instructing one to replace that with the "name of the Host header you want to insert". I am unsure as to what this Host header value should be.
Here is the link to the Solution ID:
https://support.f5.com/kb/en-us/solutions/public/7000/600/sol7616.html?sr=840207
Any help would be greatly appreciated.
Thank you,
j1devc2d
3 Replies
hoolioCirrostratus
Hi there,
A more secure method for handling static content would be to use RAM caching with ASM. The advantage is that every request and response which goes to the app is validated by ASM, and subsequent requests for the static file types are answered from cache. This requires RAM cache to be licensed. The implementation is described in SOL8216/SOL7056 on AskF5.
If that's not an option, then bypassing ASM for static file types is a good alternative. You don't need to specify a pool at all for the rule. It's in the example for people who have separate servers to host the static content. You could either set it to the same pool as is configured on the VIP, or you could remove the 'set ::static_content_pool "SET_STATIC_POOL_NAME_HERE"' and 'pool $::static_content_pool' lines.
The host variable should be set to the HTTP host for your application. If the URL is https://test.mysite.example.com/login.jsp, the host variable should be set to test.mysite.example.com.
I'm curious to see if the example works verbatim. It looks like there might be some formatting issues in the solution example. If you run into problems using the rule, reply here for help.
Aaron- Thanks so much for your help, Aaron.
The iRule did work pretty much as is - the only change I made to it was your recommendation to remove the set and pool lines referencing the static content pool.
Thanks again!
Yours,
j1devc2d - hoolioGood to hear. There is a typo in the 9.4.2 - 9.4.4 version where the open square brace after expr is missing
BIG-IP ASM versions 9.4.2 through 9.4.4
...
set test_uri2 [string range [HTTP::uri] 1 [expr string last . [HTTP::uri]]-1]]
should be:
set test_uri2 [string range [HTTP::uri] 1 [expr [string last . [HTTP::uri]]-1]]
Aaron
