For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pirlo's avatar
Pirlo
Icon for Nimbostratus rankNimbostratus
Mar 29, 2010

Syntax and Effeciency check

Trying to verify syntax and efficiency for the following rule.     Essentially this is a HTTP vip that needs XFF redirection to a dummy pool if the address matches the data group list. ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 29, 2010
Hi Blue,

 

 

If you don't use a OneConnect profile and have multiple clients connect over the same TCP connection (through a proxy), you'd want to explicitly define a pool for both cases. There isn't any efficiency lost by specifying the pool in both cases. See this post for details:

 

 

http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=3392157229

 

 

Or you could add a OneConnect profile with a /32 mask and then not specify the pool in both cases. This would have the added benefit that server side connections would be re-used for the same client IP address.

 

 

Aaron