For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ted_Waller_01_1's avatar
Ted_Waller_01_1
Icon for Altocumulus rankAltocumulus
Dec 16, 2014

Switch Statement Routing to Separate VS Using 'Virtual'

Good afternoon, I am trying to route traffic based upon a URI switch using -glob to a separate virtual server. I've read up on the 'virtual' command, and think I have the syntax right, but there's ...
application delivery
design
devops
iRules
LTM
cdougall_14195's avatar
cdougall_14195
Icon for Cirrus rankCirrus
Dec 17, 2014

Just to clarify what's going on with the "virtual" command. The traffic never actually leaves the box when using this method. No reason to worry about it being unencrypted in transit. If you run a tcpdump, you can watch the transition from the first vip to the second, never exposed outside of the hardware.

 

tcpdump -s0 -ni0.0 -w /var/tmp/ host or host

 

https://devcentral.f5.com/wiki/iRules.virtual.ashx

 

Note: In version 9.4.0 and higher, 'virtual ' can be used to route the connection to another virtual server, without leaving the BIG-IP. This functionality did not exist in previous versions. In order to make this functionality work, one must precede the virtual command with an LB::reselect command if a pool member has already been selected.