virtual server listen on multiple ports?

Just create multiple virtual servers with the same IP, but listening on different ports.

Is it possible to achieve that using an iRule?

How many ports are we talking about here? There are a couple of options, each with advantages/disadvantages...

 

--Matt

Ummm... not sure. Might be able to do it with iControl...

 

 

Can an iRule do icontrol I wonder? If so you could setup port-knocking on the F5... now THAT would be an interesting experiment...

You can either specify one port or all ports for a virtual server. As Matt alluded to, it makes sense to group the virtual servers by protocol. So if you're using SMB ports, you could create a port 0 VIP and use an iRule to block access to all other ports (example: Click here). You could then create a port 80 virtual server which handles the HTTP traffic. The advantage to separate VIPs per protocol is that you can use protocol-specific profiles and iRules per virtual server.

 

 

And jsmccombs, there isn't a way to call an iControl script directly from an iRule. Though I guess you could have an iRule log a message and configure syslog-ng to call an iControl script when a specific message is seen.

 

 

Aaron

I end up creating 3 VS's. Port 80, 139 and 445 and the problem resolved. As pointed out by you yes there is disadvantage of using single VS. I had redirection iRule for port 80 VS, so basically http profile was must for me (and future needs). The other VS's might not work correctly with http profile.

 

 

Thank you all for assistance.

My requirement is to create a virtual server on a range of ports with pool members listening on the same ports

 

 

UDP 8000-8999

 

 

example:

 

 

Need to configure Virtual server on port 8000-8999

 

Pool members:

 

Node1:8000-8999

 

node2:8000-8999

 

 

Is this possible through iRule

My requirement is to create a virtual server on a range of ports with pool members listening on the same ports

 

 

UDP 8000-8999

 

 

example:

 

 

Need to configure Virtual server on port 8000-8999

 

Pool members:

 

Node1:8000-8999

 

node2:8000-8999

 

 

Is this possible through iRule, please assist

My requirement is to create a virtual server on a range of ports with pool members listening on the same ports you can configure virtual server and pool member listening on "any" port. then reject/drop connection to port number outside 8000 - 8999 in irule.

 

 

UDP::local_port

 

https://devcentral.f5.com/wiki/iRules.UDP__local_port.ashx