Nimbostratus
CirrostratusHi,
You are getting this error beacuse it seems you have a LTM policy configured on the virtual server. You need a HTTP profile on the virtual server if you configure a LTM policy on the virtual server.
By selecting the Reject type, the HTTP profile is removed from the virtual server, but the LTM policy is still configured. So remove the LTM policy before changing the type to reject.
Becasue you do not have HTTP profile on a Reject virtual server, the virtual server has no knowledge of the HTTP protocol, so an iRule based on (HTTP) requests cannot be configured on the virtual server.
And the help states the following:
Reject: Specifies that the BIG-IP system rejects any traffic destined for the virtual server IP address.
So all traffic is rejected. It does not matter if it is the first or second request.
Maybe you can explain why you want this kind of configuration.
Regards, Martijn
CirrostratusHi,
You say you have two F5 appliances. Why don't you build a HA pair? This way your virtual server remains active if one F5 appliance fails. And you do not need DNS to switch between the two F5 appliances.
If a HA pair is not an option, you can take a look at the F5 DNS product. This is a DNS server that provide the IP-address of a application (website) to clients based on the availability of the backend servers.
So the F5 DNS communicates with the F5 LTM (F5_A and F5_B) via a protocol called iQuery. If something goes wrong on F5_A, F5 DNS is notified and does not provide the IP-address of the appliacation hosted via a VS on F5_A.
But I would advise you to contact your local F5 reseller so you can figure out what the best solution is for you. Based on your requirements.
Without full knowledge of your environment, wishes and requirements it is hard for me to give you a complete answer.
Regards,
Martijn