For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

huli_huli_37457's avatar
huli_huli_37457
Icon for Nimbostratus rankNimbostratus
Feb 04, 2012

Table timeout/lifetime Not Reflected in -count

Howdy!     I am attempting to build an IRULE that functions as a gate keeper, limiting the number of active sessions at any given point in time.       I am using a sub-table to manage ea...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Feb 05, 2012
My assumption is that table -count considers all entries irrespective of timeout/lifetime i do not think so. 

[root@ve1023:Active] config  b rule myrule list
rule myrule {
   when HTTP_REQUEST {
        table set -subtable test "1.1.1.1" "11111" 1 indef
        table set -subtable test "2.2.2.2" "22222" indef indef
        table set -subtable test "3.3.3.3" "33333" indef indef
        log local0. "\[table key -subtable test\]: [table key -subtable test]"
        log local0. "\[table key -subtable test -count\]: [table key -subtable test -count]"
        after 2000
        log local0. "after 2000 ms"
        log local0. "\[table key -subtable test\]: [table key -subtable test]"
        log local0. "\[table key -subtable test -count\]: [table key -subtable test -count]"
}
}

[root@ve1023:Active] config  cat /var/log/ltm
Feb  5 06:31:23 local/tmm info tmm[4369]: Rule myrule HTTP_REQUEST: [table key -subtable test]: 2.2.2.2 3.3.3.3 1.1.1.1
Feb  5 06:31:23 local/tmm info tmm[4369]: Rule myrule HTTP_REQUEST: [table key -subtable test -count]: 3
Feb  5 06:31:25 local/tmm info tmm[4369]: Rule myrule HTTP_REQUEST: after 2000 ms
Feb  5 06:31:25 local/tmm info tmm[4369]: Rule myrule HTTP_REQUEST: [table key -subtable test]: 2.2.2.2 3.3.3.3
Feb  5 06:31:25 local/tmm info tmm[4369]: Rule myrule HTTP_REQUEST: [table key -subtable test -count]: 2