Forum Discussion

mohammed_afzal_'s avatar
mohammed_afzal_
Icon for Nimbostratus rankNimbostratus
Aug 02, 2018

virtual server/pool to reject first request from clients but accept subsequent requests

This question might be a little vague and I'm quite new to f5. Anyway, is it possible to have a VS or a pool that can reject the first request but the subsequent requests are accepted and routed corr...
cloud
devops
LTM
Martijn_144688's avatar
Martijn_144688
Icon for Cirrostratus rankCirrostratus

Hi,

 

You are getting this error beacuse it seems you have a LTM policy configured on the virtual server. You need a HTTP profile on the virtual server if you configure a LTM policy on the virtual server.

 

By selecting the Reject type, the HTTP profile is removed from the virtual server, but the LTM policy is still configured. So remove the LTM policy before changing the type to reject.

 

Becasue you do not have HTTP profile on a Reject virtual server, the virtual server has no knowledge of the HTTP protocol, so an iRule based on (HTTP) requests cannot be configured on the virtual server.

 

And the help states the following:

 

Reject: Specifies that the BIG-IP system rejects any traffic destined for the virtual server IP address.

 

So all traffic is rejected. It does not matter if it is the first or second request.

 

Maybe you can explain why you want this kind of configuration.

 

Regards, Martijn

 

Martijn_144688's avatar
Martijn_144688
Icon for Cirrostratus rankCirrostratus
Aug 07, 2018

Hi,

 

You say you have two F5 appliances. Why don't you build a HA pair? This way your virtual server remains active if one F5 appliance fails. And you do not need DNS to switch between the two F5 appliances.

 

If a HA pair is not an option, you can take a look at the F5 DNS product. This is a DNS server that provide the IP-address of a application (website) to clients based on the availability of the backend servers.

 

So the F5 DNS communicates with the F5 LTM (F5_A and F5_B) via a protocol called iQuery. If something goes wrong on F5_A, F5 DNS is notified and does not provide the IP-address of the appliacation hosted via a VS on F5_A.

 

But I would advise you to contact your local F5 reseller so you can figure out what the best solution is for you. Based on your requirements.

 

Without full knowledge of your environment, wishes and requirements it is hard for me to give you a complete answer.

 

Regards,

 

Martijn