I have a “IP::idle_timeout” setting of 1800 seconds that I apply to traffic when the Host header starts with the word “server”. The problem is that some of the traffic gets the 1800 seconds timeout and some of it doesn’t(defaults to 300 seconds). I’ve applied logging in the irule to see the before and after idle setting which shows it should be set to 1800 seconds but when I look at the connection table it only has the default idle setting of 300 seconds. Anyone see an error in my logic below?
viprion 2400 running BIG-IP 11.2.0 Build 2451.0 Hotfix HF1
ltm virtual /legacy/virtual_443 {
destination /legacy/10.1.1.1:443
ip-protocol tcp
mask 255.255.255.255
partition legacy
persist {
/legacy/persist_virtual_profile {
default yes
}
}
pool /legacy/virtual_7777
profiles {
http_redirect_rewrite_profile { }
tcp-lan-optimized {
context serverside
}
tcp-wan-optimized {
context clientside
}
wildcard_virtual_cert {
context clientside
}
}
rules {
/legacy/redirect_some_virtual_to_http_rule_3
header_insert_https_indicator
default_snat_rule
}
vlans-disabled
}
ltm rule /legacy/redirect_some_virtual_to_http_rule_3 {
partition legacy
when HTTP_REQUEST {
set http_host [string tolower [HTTP::header “Host”]]
set http_uri [HTTP::uri]
if { $http_host starts_with “server” } {
IP::idle_timeout 1800
persist none
HTTP::header insert Secure-mode SSL
use pool virtual_8888
}
elseif { $http_uri starts_with “/config” or
$http_uri starts_with “/login” or
$http_uri starts_with “/ui” or
$http_uri starts_with “/utils” } {
HTTP::header insert Secure-mode SSL
use pool virtual_7777
}
else {
HTTP::redirect “http://$http_host$http_uri”
}
}
}