virtual server listen on multiple ports?

You can either specify one port or all ports for a virtual server. As Matt alluded to, it makes sense to group the virtual servers by protocol. So if you're using SMB ports, you could create a port 0 VIP and use an iRule to block access to all other ports (example: Click here). You could then create a port 80 virtual server which handles the HTTP traffic. The advantage to separate VIPs per protocol is that you can use protocol-specific profiles and iRules per virtual server.

 

 

And jsmccombs, there isn't a way to call an iControl script directly from an iRule. Though I guess you could have an iRule log a message and configure syslog-ng to call an iControl script when a specific message is seen.

 

 

Aaron