Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner

Forum Posts

SSL::Cipher name and version

Can someone tell me what the result values are when I use the following:   SSL::cipher name  SSL::cipher version   returns: "SSL" and "v3.0" or "3.0" or "3"   Thank you so much. What is a good way to test this because you would need to implement...

Monitor Timing Information?

Is there any way to get the amount of time the last monitor execution took for each node in a pool? We have a set of (HTTP-based) servers that will start to slow down before they fail. We'd like for our iControl dashboard to alert us to that slowdo...

Error Handling

Does the API consist of a list of error codes specific to the FirePass SSL VPN Client itself? Or will it simply return the standard HRESULT values when encountering runtime errors?

Version 4.7

Hello,   I've heard that version 4.7 will be out sometimes, but wonder if there's any changes or new feature in iRules? By the way, do you know when F5 will release it?   Thanks.

ldap auth

Do I need to change the ssl_cc_ldap authentication profile if I want to use a static username and password LDAP AUTH for a VIP? When I add this profile to a VIP it indicates that I need an SSL Profile also.

http/https redirect

Hello everyone;   I'm trying to do a simple http https redirect for a VSA.   Before   http://cms-d3.tmi.telus.com   looking to see   https://cms-d3.tmi.telus.com   I found the code sample   when HTTP_REQUEST {  HTTP::redirect https://[getfield [HTTP:...

Cron Job Question

I apologize if this is not the correct forum for this question, but I don't see a general 4.x forum for sys admin questions. If there is a different forum, please let me know and I will post there.   Is is possible to create a cron job which will ba...

jsessionid uri vs. cookie

I am using the following rule to persist via jsessionId.   when CLIENT_ACCEPTED {   set add_persist 1  }  when HTTP_RESPONSE {   if { [HTTP::cookie exists "JID"] and $add_persist } {   persist add uie [HTTP::cookie "JID"]   set add_persist 0...

Optimizing large lookup tables

I have several customers requesting various functionality such as selective rate limiting, access filtering, geo load balancing, etc, all of which would require very large reference tables (4000+ rows).   This post (http://devcentral.f5.com/Default.a...

syntax check?

Hi,   I'm a complete novice with i-rules, so can anybody advise how to test or check that the syntax is correct, that there are no problems with the writing of the rule (eg spurious characters or spaces) which might cause problems?   Thanks   Andy

iRules and ASM

Hello,   Great forum and resource.   Looking for some help in using iRules in conjunction with ASM.   I want to experiment with an iRule to bypass the ASM for certain objects - do not send .jpg to ASM but direct to pool etc. Is anyone doing anything...

HTTPS Redirect

I have this iRule in place   when HTTP_REQUEST {   HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri]  }    and I am getting this error   TCL error: Rule redirect_to_https - Operation not supported. Multiple redirect/respond invocations...

Checking IP in Pre-Logon Sequence

I need to differentiate based on source IP when some of our vendors are connecting in. I see the variable session.network.client.ip but cannot figure out the syntax of it as well as I need to know if you can use subnet ranges with the variable. Any...

Fallback iRule

Greetings;   I am wanting to use the fallback host feature of the Big-IP to redirect users to a static "sorry" page when all nodes are unavailable in a pool. According to SOL6510 (https://tech.f5.com/home/solutions/sol6510.html), the fallback host w...

limiting broadband users

Hello,   I have several streaming virtual servers and also other services (http,ftp,smtp,etc) configured in my big-ips running 9.1.1 version.   Is there a way I can configure a rule to detect the connection type of my clients and apply a rate class a...

TCP Port Redirect

I am trying to write the following rules and I am getting errors on line 1, 6, and 10. please let me know what I am doing wrong.   class ports {  80  443  }   when CLIENT_ACCEPTED {  if { [matchclass [TCP::client_port ] equals $ports ]}  node 167.206...

Header Insert

Need helping finding info relating to header inserts. This was working fine in v4 with the following syntax:   ClientIP:${client_addr}   Since we migrated over to v9.2 it is not workin properly. Any suggestions would be appreciated.   Thanks,   Luk...

HTTP::header insert

I have implemented the following iRuel to add a httpheaders.    when HTTP_REQUEST {  HTTP::header insert BESPOKEHEADER "value"  }   It adds the header fine but the value is always blank   any ideas ?   BIG-IP 9.1.1 Build 54.6   Reason for adding thi...

Lookup a lookup...

Hi all,   I'm trying to make my life easier by having a single iRule that lookups the name of a data set from another data set and then do a matchclass against this returned name. Then do this for each row in the lookup data set... okay some code mig...

LocalLB.ProfileStream.set_target_string ??

Hello,   I have the following perl subroutine that I am testing to set the target in a stream profile:   sub setTarget()  {   push (@profileName, "ocm_reject_stream");    $targetValue = "\@test1\@test2\@";   $defaultFlag = FALSE;    $ne...

voyeuristic pool monitoring

Hi all,   Unless i'm very much mistaken there is no way at all within the LTM's to make them snat their monitor traffic. As such whilst we can happily use a snatpool or such on a virtual server and have it work great, if our monitor traffic needs to ...

Need Help to Migrate Rule from V4 to V9

Hi Guys,   I have to move the following Rule from v4.x to V9.x. I,m trying to use "case" instead of "if", but it´s giving me syntax error:    rule Cache_Fetch {   if (http_uri starts_with "/jm/pms" or http_uri starts_with "/cgi/pms/") {   use ...

Inspect URI without Case Senstivity?

Hello all,   I have created the following rule to redirect traffic based on the URI to another pool, however, I want the rule to ignore case sensitvity within the URI string. Here is my rule:   when HTTP_REQUEST {   set uri [HTTP::uri]   if { $u...

Need to give no client cert message to users

Hi all, I need a quick little rule to see if a user coming in to our Intranet has their client certs loaded, and if not let them know in a short message. If they do have certs, nothing needs to happen, just continue processing. The rule I've start...

Question about the posted SocialSecurity Scrubber

 For the iRule you have posted for finding/scrubbing social security numbers is it necessary to calculate $ssn_len since it seems that based on the regexp the length would always be 11?   In the exerpt below would it be OK to eliminate the line:   -...

LB::reselect - LB_SELECTED event occures twice

Im trying to write a rule that will select the pool member according to a parameter in the query string .  It seems that the LB_SELECTED event occurs twice.  in the first occurence the pool name is: "xxx"  in the second occurence the pool name is: "_...

ReturnURL HTTPS into HTTP --help

Hello   I currently have problem with web page using ReturnURL or redirect page from secure page back into normal page.   The web server has secure login web site with the following paramater:   https://www.abcde.com/login.aspx?ReturnURL=%2fuipriv%2f...

Integrated Windows Authentication

All,   I apologize up front if I ma in the wrong forum or this question is incorrectly directed.   I have been asked to create a monitor that can use the authentication that is built into the browser.  Our users can access the applications on our s...