Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

Forum Posts

BIG f5 is blocking and not loading the login page

We have a problem with base urls when application is behind f5.  I have one server(http://abc/xyz/login.html) behind F5. I am trying to access my application with f5 addess(http://test/xyz/login.html). This address is clints uses.  My page is not loa...

iRule bad behavior

Hello everybody!   I am new in this forum, and I woulkd really appreciate if any of you with your experience could help me to find out wath is wrong with my irule that is not working properly!    The required behavior is the following:  Many clients ...

how to log source ip connections?

i have used the irule for limit connection from one source ip vip in the bigip, this irule also logs each source ip that opend more than X connections, that the irule set.  i would like to log the source ip that pass the X connections and will also i...

HTML Content Replace

Hi,   I realize that there have been a number of conversations started enquiring about replacing content in html. As someone new to the iRules structure im looking for a simple answer to the following question:-)   If for example I want to replace re...

X-Forward-For

Hello,   is there a possibility on version 4.x to add X-Forwarded-For information to the HTTP header? Can it be done using iRules? Thank you!   Regards  Karel

Base URL

An application we are going to load balance is using base url. Because of this, the BIGIP will not allow the application to function properly. When the WebServer is accessed through the VIP, the base url attaches the DNS name of the server that it is...

Need Help!!!

I know nothing about host headers or how to create an irule to forward traffic from the bigip to a server that hosts 7 different websites. Can someone please help me. I need the barney version of this. I am completely lost with these big-ip's

http headers

Okay....I am new at this. I have two servers that are acting hand in hand, Meaning that if you try to access a website either server can pickup the request. The problem I am having is that I have to create an irule for 7 different sites that will r...

Restricting traffic to a range of source IPs

We need to restrict incomming traffic to a range of source IPs. Traffic not from the allowed range is to be rejected. The problem is not in the rejection but rather in what happens to connections that are to be rejected. Would they simply time out or...

remove part of hearder

I am trying to change the URL from http://abc.cde.com/xyz/inventory.do?tt   to  http://abc.cde.com/inventory.do?tt      I tried following rule but it changed the whole url to real server behind F5.   when HTTP_REQUEST {   set uri [HTTP::uri]   ...

Please confirm new iRule is accurate

We're migrating to 9.x. I have a bunch of 4.x rules similar to the one shown below. Can someone please confirm that the syntax for the new 9.x rule is correct?   Thanks!  Bryan   ========  OLD RULE  ========   if (http_uri contains "/vault/finance") ...

Newbie: how much can I interact to appliance?

Hi guys, my company is planning to use BIG-IP appliance as reverse proxy in our IT infrastructure.  For storing user activity I've managed to write a tool to collect reverse proxies log file, in RAW format without any sort of manipulation.   Is it po...

pool redirection based on webaddress

Hi,   I have request from a client, they wanted all traffic thats coming to their site https://www.deve.com redirected to a pool and the traffic to https://deve.com redirected to another pool. they wanted a same VIP pointing to both webaddress. Kindl...

Monitor with multiple retry

Hello,   I'm new to the iRule world (never had to configure a BIG IP system before), and I'm facing a problem with monitor of pool nodes.   For some reason (that I haven't figured yet), the basic http monitor think some web server is down (even thoug...

Stop event processing for multiple rules

I have virtuals defined with two rules: one rule which is common to all, and one customised for each virtual. All the rule processing is done within the HTTP_REQUEST event.   Can anyone suggest a simple way of stopping the HTTP_REQUEST event from fir...

uni by Nimbostratus
  • 0 Views
  • 9 replies
  • 0 kudos

Sample Rules

Hi all,   We're migrating from 4.x to 9.x and I'm currently working on the iRules. I'm currently hunting and pecking through the forum posts to find sample iRules to base mine from.    Question 1:  Is there a place on this page providing example iRul...

need help to convert from v9 to 4.5

i recently got an old Bigip for test env, i used irule only with my 6400 on ver 9.x, now i need to migrate few irules from 9.x to 4.5, mybee someone here can know how it can be done ?  the idea of this irule is to log multiple connections based on so...

X-Forwarded-For iRule

To start I am very new to F5 products and thus know nothing about iRules. The only thing I know is what I need one to do.  I have enabled the X-Forwarded-For option for the sites and they are logging correctly. The issue I am having is that I get t...

auto-complete not working

Hi all,   I just installed iRule Editor ver 0.9.0.22 and the auto-complete is not working. Are there any known issues with this feature?    Thanks,  Bryan   BTW--I verified that the feature is turned on.

WSDL Development?

What do you guys at F5 use for your WSDL development? Does it come from an IDE? XML development tool (such as XMLSpy)?   I'm considering playing around with an iControl 'wrapper' service, something which could provide some functionality covering the ...

persist lookup uie command

Hi,   I can get IP address of pool member with "persist lookup uie node" command.  For example, I can get "10.4.10.201" with "persist lookup uie $reqid node" command ($requid = 11111111) from the following persistence table.   PERSISTENT CONNECTIONS...

Match across services persistence w/rule

I have read in several threads that you cannot directly call "match across services" from a persist command in an iRule.   I have converted a v4 configuration that had several rules that ended up like this:   when CLIENT_ACCEPTED { if { [serv...

Multi redirects in Irule

I need to send redirect from an Http site to two different locations. I put toghther this redirect rule and was wondering if it look ok?   when HTTP_REQUEST {   if { [HTTP::uri] contains "/abc"} {     HTTP::redirect "https://myweb.com/...

Creating a data class in 9.x

I am trying to create a class in 9.x to allow only certain uri's to each web site. Here is the what the rule looks like.   class allowed_uris {  when HTTP_REQUEST {   if { ( [HTTP::host] contains "website1.com" ) or ( [HTTP::host] contains "websi...

Help for a newbie

Hello. I am very new to the BigIP, and faced with having to solve a problem for an active website.    Here is the issue. The website has secure pages, which are kept in a specific directory. I have written an iRule to redirect those pages to HTTPS, a...

Disablling SSL v2 to users with iRules

I'm looking at capturing users who use an older browser which negotiates with SSL v.2 and redirecting them to a page that basically tells them to upgrade.   My questions are these:   1) Can I use SSL::cipher version to determine if the user is using ...