In this case, the BIG-IP is terminating SSL connections but the backend web server needs the information from the certificate but doesn't want the BIG-IP to re-encrypt the traffic to the node. We have successfully configured the BIGIP device to ...
The following question came in regarding optimization of iRules: Do you know whether if-elseif (nested if) or switch (case) is more efficient using the TCL interpreter on v9 ? In his usually verbose self, unRuleY responded as follows: You coul...
The question here was how to log a lb failure (no nodes available) but not on every connection. It would preferably log an error every 50 lb failures. unRuleY responded with the following rule that will go a step further and create an array that w...
Some fun stuff has been going on in the iRules forum with regards to security. If you are interested in securing your site from exported social security numbers, you might want to take a look at this Tech Tip derived from an iRule. Most recently ...
I've blogged about Self-signed Server Certificates and how they can cause havoc with client java applications. We'll I put the call out there to provide solutions and a very slick one has arrived! XTrustProvider.java: /* * The contents of this...
A question recently came up in the iControl forums about how to deal with the statistics returned by our iControl interfaces. In 9.0, we changed the interfaces to return true 64-bit values consisting of a structure of a low and high 32-bit value (t...
Well, today marks year number 7 for me here at F5 Networks. 1998 seems so long ago and F5 has changed so much in those years. I was going to include an image of Seven of Nine in this post but didn't want to imply that I would only be here for 2 m...
This question has come up again recently by a customer and I thought I'd post about it again. The customer downloaded the SDK, compiled the java sample applications, and tried to run them against one of their BIG-IPs. To their surprise the following ...
In their most recent L4-L7 product review, Network Computing decided to base their testing off of the requirement of a real-world IT shop – CMP Media (Click here to see the results). This review demonstrated the importance of product flexibility and ...
I got asked this question today. I've been around here long enough to have heard all the supposedly "true" origins of the company's name. The most frequent assumption I've heard is that the company is named after the "F5" key on a standard keyboard. ...
When building many enterprise web-based applications, security must be taken seriously. iRules provide powerful capabilities for influencing security decisions when processing for your web services and applications. This is a rule for requiring a cli...
Ok, I've had my blogshares listing for a while now and nobody has purchased even a single virtual share! I figure I could be a rogue and go buy back all my open virtual shares but that wouldn't be any fun. Maybe I'll bring this up at my next sharehol...
I've seen this quesion asked in several forms so I thought I'd try to shed some light on how to handle accessing methods with multiple outbound parameters using Perl's SOAP::Lite: Let's take a look at these function prototypes: void func1(out string ...
At Gartner Symposium this week, I've been sitting through some very interesting sessions presented by Gartner analysts. One of my favorites was given by Donna Scott and Deb Curtis. Both have some excellent thoughts on how to transform IT operations f...
Introduction A fundamental problem in IT today is the lack of process and coordination between network and application teams in designing and deploying applications or services. This lack of coordination results in missed opportunities; better more ...
I haven't been able to say much about this until now, but we've been very busy here at F5 as of late. I saw this link today on which is a precursor of things to come in the coming weeks. Along with the new platform, we've also been hard at work in ...
Forum activity has picked up in the last few days and that reminded me that I haven't posted anything here in a while. So, here's a good chance to catch up. First, we have been meeting with several analysts lately and believe we have a good story on...
My current project is a notification subsystem for the next release of BIG-IP. Think of it like a SNMP trap but using web services as the notification method. In a typical management system the client managing the device has the burdon of determinin...
