Problem this snippet solves: In many cases generated bad ip address lists by a SIEM (ELK, Splunk, IBM QRADAR) need to be uploaded to F5 for to be blocked but the BIG-IQ can't be used to send data group changes to the F5 devices. 1.A workaround to use...
Problem this snippet solves:How to create an Internet exposed HTTPS Load-Balancer with VoltMesh where the Origin is reachable through a Volterra node. The Origin is HTTP based but will be exposed on the Internet over HTTPS.Two steps are needed:Creati...
Problem this snippet solves:Creation of an IP prefix set for VoltMesh in any of the relevant namespaces (system, shared or dedicated application namespace).This prefix IP set will then be used in either FastACLs or Service policies.How to use this sn...
Problem this snippet solves:How to create an internal HTTP Load-Balancer with VoltMesh where the Origin is reachable through a Volterra node.Two steps are needed:Creation of the Origin (1-origin.tf file)Creation of the Load-Balancer (2-http-lb.tf fil...
Problem this snippet solves:This script is an external monitor for TACACS+ that simulates a TACACS+ client authenticating a test user, and marks the status of a pool member as up if the authentication is successful. If the connection is down/times ou...
Problem this snippet solves:The main goal of this article is to share an easy way to create your own Certificate Authority (CA) for your lab enviroment with APM module.REF - https://github.com/DariuSGB/LabCAThis repository is composed by a set of scr...
Problem this snippet solves:I have been asked to have a maintenance page that can be used across multiple VIPS for different websites that all want different text displayed and also a logo. What I have come up with is some generic styling and then re...
Problem this snippet solves:This ansible playbook can be ised to copy the test ASM policy from the dev/preproduction environment to the production environment as this is Continuous integration and continuous delivery. How to use this snippet:You use...
Problem this snippet solves:For attackers that cause too many violations it is better to block them at the start of the HTTP_REQUEST or CLIENT_ACCEPTED events as the ASM/WAF processing causes too much CPU and the CLIENT_ACCEPTED and HTTP_REQUEST even...
Problem this snippet solves:Optimal Gateway Routing (OGR) for Citrix Storefront is a design whereby a Citrix web client is directed to an ICA Proxy Gateway (ICA-GW) anywhere in the world that is closest to the app/desktop hosting environment (XenApp ...
Problem this snippet solves:Optimal Gateway Routing (OGR) for Citrix Storefront is a design whereby a Citrix web client is directed to an ICA Proxy Gateway (ICA-GW) anywhere in the world that is closest to the app/desktop hosting environment (XenApp ...
Problem this snippet solves:This irule can be used to validate the ID (hostname or IP addr) an SMTP client claims at the start of the SMTP protocol.The validation is done via a DNS lookup if the client ID is a name, and unless the name exists in the ...
Problem this snippet solves:Available script and rest-api options for f5 automatic configurations.How to use this snippet:Code :I think that it is interesting to share how on F5 different scripts can be run at different times and states. 1.You...
Problem this snippet solves:Browse iFiles from internal IPs, serve the files externally by name.How to use this snippet:Create DNS name like ifile-*.example.org and point to a vip.Add iRule to a vip. before other events.edit iRule host matching.Code ...
Problem this snippet solves:This gets the status of all Virtual servers and the pool members and write to a text file. If one of the pool member is up, then the pool will be marked as up as well. How to use this snippet:Based on Python 3 and BigREST ...
Problem this snippet solves:This uses BIGREST SDK API to save/download the ucs file. Adding it here since I couldn't find a similar one, How to use this snippet:Based on Python3 and BigREST (https://bigrest.readthedocs.io)Code :#Import needed librari...
Problem this snippet solves: First of all, this is more like an article. I cannot publish an article so I share what I found here.When we are choosing Load Balancing Method, we can see Ratio Least Connection mode in the list. But there are rare artic...
Problem this snippet solves:This script uploads, installs, and verifies the three toolchain components: declarative onboarding, as3, and telemetry streaming.Note: bip.py in BIGREST must be modified to allow 202 response codes. The author will have th...
Problem this snippet solves:Sometimes you want to have some authentication for a system, but don't want to build an AD server, or connect up to another complex authentication system. This iRule will simplify this and makes it very easy to manage the ...
Problem this snippet solves: Overview This is a script which will generate a report of the BigIP LTM configuration on all your load balancers making it easy to find information and get a comprehensive overview of virtual servers and pools connected t...
