In order to protect a critical application (Oracle EBS), we went the AzureAD/OAuth2 pre-authentication way.This mean that the users needs to have a valid M365 session in their browser to reach the application. They can then log in (again) and use the...
I am trying to use the Guided Configuration to create SAML Service Provider. However ths is can only be run from the Common partition whereas the VIP required has to be on a different parition for security reasons. I have tried to configure this manu...
Hi -I'm writing an iRule using the HSSR HTTP client and am specifying the -maxtime argument. It looks like there are a couple of issues in how maxclock is computed.The 'maxtime' argument is specified in seconds as is 'wait', but 'timeout' is in milli...
Hi All, Quick question: Can BigIP load balance Java RMI connections using iRules? Here's the Scenario: Service Type: Java RMI based. Server Side: BigIP Managed Service, Weblogic Clustered backends. Client Side: Weblogic Cluster. For all no...
Is it possible with iRules for me to enforce a SSL cipher level for a select group of external IP's that are accessing a shared website? Thanks for anyone that can spare some advice or if possible a starting point.
Hi Forum, i have a problem that's driving me crazy... This is my iRule: when HTTP_REQUEST { set fn [URI::basename [HTTP::uri]]; set ext [string range $fn [string last "." $fn] 999]; if { [ matchclass $::static contains $ext ] } { ...
Hi, Guys Is there any SDP command information ? There is no descirption and example how the SDP command use. Attached the TCPDUMP screen capture that shown the highlighted IP address like to be rewrite to BIGIP VIP address by iRule, since the stre...
After I mercilessly rebuild my bigip system using iControl, and I log in to check the config files, I see: Feb 14 14:36:24 kopsildb003 LOGIN: Re-starting pvad over and over and over (every second or so). What is pvad? The GUI also shows that t...
I want to define a keep alive timeout for the client - bigip connection. In an http profile you can only configure the max. no. of connections. The keep alive timeout in an oneconnect profile defines the timeout for the bigip - webserver connections....
Hi, I want to base64 decode a 24 character string to a 32 Hex string. b64decode transfoms the string to a 16 Byte long string To convert it to the 32 Hex values I use the TCL command binary scan $v2 H* v3 Example: set v1 6LCnVil6ib5Df9+6JFiW5A=...
Folks I am hoping someone can provide some advise for this, I am relatively new to iRules. I have an iRule that checks HTTP::uri for various strings and directs traffic to a pool based on that. The complete iRule is at the bottom of this post. We h...
How are VIP statistics and status reported/collected when I have a VIP that has an iRule with multiple pools? (There is no default pool set on the VIP). From what I am seeing, it shows up as green and shows traffic. I need to know what this is actu...
I am running Java 1.5 on a BigIP ver 9.0.5 using SDK 9.0 and keep getting a null pointer back from the BigIP. I can see in the logs on the BigIP where it is executing and showing no System Info (blanks). Here is my dump from my IDE. Did I set som...
I am looking for a bit of sample code that will allow me parse an incoming client DNS query (running UDP/53 virtual server on BigIP 9.x) and then redirect the incoming query to one pool or another based on the hostname that is being queried. I have l...
I am not a programmer to say the least. I have been given the task to convert our old bigip rules (v4) to the new bigip irules. Any help is greatly appreciated. first type of rule: redirect to "https://someipaddress" second type or rule: if...
Overview: client_type_a ---> VIP1 ---(SSL)--(ssl profile)---> (CLEAR) ---> pool_a client_type_b ---> VIP1 ---(SSL) ---> pool_b I want to send two different clients (conceptually can be thought of as IE and Firefox) to a single IP address (VIP)...
I am using the following redirect rule to detect SSL certificate version and number of encryption bits. The match seems to work as expected; however, the results are not at all what I would expect. I can see in the HTTP log and via a tcpdump that...
Hi! I never used iControl and i have a doubt if i should use iControl to solve my problem. The objective is to validate a certificate against an external database (not a regular crl). Can i create a script with iControl API and then call it fro...
I have an issue where I am trying to drop requests based on either a specific domain being requested or a combination of a domain and a specific uri. Instead of being dropped the requests are being re-directed to our fall back host that we have spec...
Are the COMPRESS iRules available if you don't have the Intelligent Compression module?
Hi, Im trying to make this work but not getting the expected results. when HTTP_REQUEST { if { [HTTP::uri] equals "/" } { HTTP::redirect https://[HTTP::host][HTTP::uri "/some_java_app"] } } I just want to force the users that are using the ...
First off I opened a case with support. Just was hope one of the iRules export would see a problem with the rule. If seem every time we have user testing there site witch has these rule attach to it it causes the bigip to core. Attach are the rules. ...
redirected to iRules section
We are using the mod_proxy module to proxy URLs. I would like to configure BIGIP to function the same. I have configure a redirect and it is currently working. if (http_uri contains "website") { redirect to "https://abc.mydomain.com/home" ...
The following rule logs the "Cookie" header of http requests: when HTTP_REQUEST { set ch [HTTP::header "Cookie"] if {$ch != ""} {log local0. "$ch"} else {log local0. "no cookie"} } If there are multiple cookie headers, it returns the last o...
I noticed on some of the messages on the forum that there is a iControl.jar file. I have been trying to compile the 9.2.2 Java examples and keeps complaining about finding that jar file. Could you please tell me where this jar file is located?
I have seen lots of threads about using HTTP::payload replace to substitute content in a server response. It can also be used to add content to the payload. One requirement is that you add "response rechunk" to the http profile. This example adds...
Hello, Will this iRule rewrite all requests (both http and https) containing "url1.bdos.bdd.local" in the URI to "http://url2.bdos.bdd.local"? Thanks? -------------------------- when HTTP_REQUEST { if { [HTTP::uri] contains "url1.bdos....
We're trying to find a way to gather information about what version of HTTP people's browsers are using on a site of ours. We've started with this irule: when HTTP_REQUEST { if {([HTTP::version] == "1.0") or ([HTTP::version] == "0.9")} { ...
I 'd like to block input with ' (Single Quote) but script can't detect this character. So If who can solve this problem pls help me. when HTTP_REQUEST { if { [HTTP::uri] contains "'" } { Discard } } Thanks
Hi group - This is my first venture into the world of IRules, and I'm hoping for some direction. The basic situation is this - I have a webfarm runing several applications. Some of these applications, we get paid for, and one we do not. The one ap...
I would like to use the clone pool command to send the same message that I sent on a pool command. But I get no information going to the clone pool. (Or it seems that way to me) I have a Java socket listener waiting for this information. I can send...
Hi all, I'm working on iRule which should do the following . I have two Virtual Servers : * One for RTSP traffic on which I setup persistence per source_addr. * One for HTTP traffic which should connect the user to the same node that handling th...
| User | Count |
|---|---|
| 33 | |
| 15 | |
| 7 | |
| 6 | |
| 6 |
