So, at the end of the day I want to be able to create a perl script that allows me to enter a member IP address and it to return to me which pools and virtuals it belongs to. There is an easy way to do this with pools with the 'node -> get_pool_mem...
Hi, I need to Limit the number of concurrent connections to a virtual server based on Source IP or source subnet, so for example a given IP or subnet can have only 5 simultaneous connections at any given time with a specific virtual server if a 6...
As above, I want to deliver ssl cert serial number to http server behind BIG-IP, and redirect the users who has no cert to an error page at same time. It looks like that if I use two "session add ssl" in iRules: session add ssl [SSL::sessionid] [...
What is the best syntax to compare uri's in a mixed case environment. I want to use something along the lines of: if (http_uri starts_with "/cccard/public/en/ApplyNow") redirect to "https:/%h/%u" Where the A in apply and N in now could be ei...
RTSP Proxy: Situation: Remote clients point to a virtual server for streaming audio/video… based on the information in the RTSP header the F5 will make a decision on which pool to send it to (iRules). The BigIP contacts the server on behalf of the ...
Please See comments below when HTTP_REQUEST { if { [HTTP::uri] starts_with "/channel/" } { pool QA1 } elseif {[HTTP::uri] starts_with "/performance/" } { pool QA2 } elseif { [HTTP::uri] starts_with "/lead/" } { pool QA3 } Please...
Hi all, I've been looking at some BIGIP info and wondered if anybody knew how easy it was to define/add client cache control headers (such as:Cache-Control: private,max-age=86400,must-revalidate,proxy-revalidate)to outgoing requests from the server...
Hi, I am trying to rate limit my tcp connections based on client source/destination IPs so that a given user is limited to 15k/sec. Any suggestion on how to achieve this based on irules and rate shaping? Thanks, George
Fairly new to iRule so looking for some help on an idea. www.companya.com is a WideIP on a 3dns server that resolves to addresses 10.0.0.1 or 11.0.0.1. Each address goes to a different DataCenter (we'll call them 1 and 2). I don't care which Datace...
Hi, I am using following commands of bigpipe to enabling/disabling nodes. node [:] ... enable node [:] ... disable These commands are working along with service e.g. bigpipe node 204.10.122.11:80 disable Is working fine but when I tried t...
Looking for an iRule syntax that allows me to redirect client requests to a pool based on the RTSP header. When a client connects to the bigip as an RTSP proxy how can I read the request in the header to select the appropriate pool. Not familiar with...
If there are any other posts that would answer this - just let me know and I will do more digging, but I didn't see any. We have an iRule that handles client certificate authentication. I've posted other things about it before. It handles users e...
else { HTTP::redirect "http://10.172.155.201$uri" <---this works well as a pop up displays the corresponding help document (on IIS server IP : 10.172.155.201/help/en/become_member.htm as an exemple) pool iis_pool <------ this doesn t ...
Is there a way in irules to determine the number of defined nodes in a pool. I'm trying to automate syslog notification when a pool is getting low on nodes. The number of active node is good but I need the context of how many nodes are in the pool. ...
I have inserted "timing on" into a couple of scripts, and collected stats (on test sites) for a few days. The timing statistic is expressed in "Cycles." I have not found a description of what "Cycles" is measuring. I thought perhaps it was CPU clo...
When a cookie is created at the bIG IP level it seems that the user is stuck on the same server for his session (which is a requirement of our solution) but should that server fail during the session, user gets Pages cannot be display..(probably beca...
Hi, This is Ken. I encounter a problem and need to write some irule to help. There are two notes servers, client collect the server should use the server's hostname. The server discard any non hostname connection. But, I need to load balancing...
Is it possible to write iRule to run external script when F5 change node selection with priority ? I have a requirement to load balance two servers in Active/Standby mode using minimum active member and priority settings. When the primary server g...
Dear all, I don't have much experience on iRules, and would like to if iRules can do the followings: My client is running native Lotus client/ server application on port 1352. There are 2 Lotus servers behind the BIGIP, each with its own host nam...
I have saw some rules that use TCP::Collect n m from the BIGIP Refence Guide, I can only find the n means how many bytes collected, but what the 'm' means?
I have two separate issues but both are related to solving the same problem: I have the code: set node [session lookup universal $hexid] log "found node $node in session table" use pool socks member $node This doesn't seem ...
I would like to create a packet filter and toggle the filter on and off based on node availability. I cannot find any documentation that suggests a Packet Filter can be controlled within an iRule. Can this be done? How about an iRule that trigg...
I have an HTTPS Virtual Server that is terminating SSL. I would also like to take the inbound https requests and append a specific webpage to it. For example, if the user sends a request to https://example.mycompany.com I would like a redirect to h...
Hi F5 Rulers ! I am currently having a customer with an iRule who want to persist on the SET COOKIE message contained in the server Response to the FIRST client REQUEST. I would like to know if the HTTP::Cookie will intercept this Set Cookie fro...
I am trying to come up with a rule where the first directory name of the uri is used to rewrite the URL. an example will be: http://www.foo.com/abc/doc/index.html => http://abc.foo.com/abc/doc/index.html. I want to make it so that the rule is g...
Hi, Interface ITCMLocalLB.VirtualServer.get_all_virtual_address_states is given in help with iControl 4 SDK for C, but it is not available for SOAP calls, even it do not present in WSDL. so can some one tell me what can be the reason. Apart from ...
I think I know the answer to this question already, but I need to ask anyway to confirm. We have a client SSL profile that is set to "Require" for the client cert. If you request a page on this virtual server, IE prompts you to select a client cer...
Using IControl / IRules, I want to be able to dynamically provision a "stand-by" server. Basically, when any particular pool exceeds a threshold that we define (total CPU Utilization, total RAM utilization, maximum number of concurrent connection or ...
I need to write an iRule that will take incoming connections to a vip on my Big-IP, and SNAT the source addresses to a specific IP:port combination, and then send the connections with the SNAT'd source IP and port combination to a pool. I have no e...
Using IControl / IRules, I want to be able to dynamically provision a "stand-by" server. Basically, when any particular pool exceeds a threshold that we define (total CPU Utilization, total RAM utilization, maximum number of concurrent connection or...
| User | Count |
|---|---|
| 10 | |
| 9 | |
| 8 | |
| 5 | |
| 4 |
