Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner

Forum Posts

Grab cookie contents and insert it as another.

I want to grab the contents of a cookie (from an http post) and insert that value into a new cookie with a different name. This is what I have so far that will not pass syntax:     when HTTP_REQUEST {   set auth_user [findstr [HTTP::cookie tx...

Fallback Host problems

We just upgraded our old 5000 running 4.5.12 to a new 6400 running 9.0.5. We had a few problem but we have worked through most of them, exect this one. We have a fallback host set in the HTTP profile "http://siteunavailable.mysite.com/index.pl?SiteNa...

SSL offload: http header replace

I am doing SSL offload on on of our site.     BigIP is forwarding https request from the client to the server using https.     I need to write an iRule to change the http header for the http request from http to PROXYHTTPS.     Will I be cha...

Suppress Rule name "header" from Log entries

Hi folks   I am writing a rule to create a "proxy log" of all HTTP requests that go through our BIGIP units.     I can out put a standard HTTP Common log entry quite happily using a rule, however the log output includes a header of the date tmm t...

Redirect Via Rules Hangs then timeout

I am attempting to redirect the incoming url to place the context root in the url. I have written the following rule but when i apply the rule i recieve the the ssl cert but then it hangs eventually timing out.     Any help would be appreciated  ...

V9.0.4 SNAT, but maintain source IP of client

We have two groups of servers which are on the same network (L2 and L3). Is there a way to preserve the source IP of a request from group1 web servers to a vip on the same network of the two groups of servers, without the group2 servers sending retu...

substr doesnt work as expected

This is simple rule I wrote. I have a virtual server on port 80 and a proxy for 443, both pointing to this rule.     I was expecting when url is https, it would go to yahoo and when its not https, it would take me to msn.     Problem : In both ...

Access resources like files and SQL database.

Firepass looks a great tool for us.   We are going to build a windows application for our customers that will access resources from our server.     Question:   After the SSL-VPN connection is established, can we access our server the same way as...

iRules Pool Selection

Hi. We have an F5 BigIP-1500, running 9.04, configured with 4 virtual servers. (80/443 on IP1, 80/443 on IP2). Persistance is by cookie insertion, and is enabled across services. We have OneConnect enabled, and do compression based on brow...

How to use irules to do SIP outbounding proxy?

Hi, everyone   I am trying to do SIP proxy server loadbalance. By now, we can do loadbalance for inbound SIP request, I mean , from the client to the proxy server , just using SIP persistant.   The problem is, when the proxy serverA send ou...

trunking 2 BigIP 1000's

I am trying to Trunk 2 BigIP 1000's to create one logical switch. The problem I have is that I have multiple VLANS on the switch, so when I try to ping server1 on VLAN1 on switch1 from Server2 on VLAN1 on switch2 I get no response. I have tried to ta...

UDP::payload replace

Anyone know if "replace" is supported in UDP::payload?   The documentation does not list it.     If not, does anyone know of a way to manipulate some data (generically) in UDP packets?      

iRule Cryptographic commands

Forgive me if someone has already addressed this in a previous post...     Could someone please point me to some documentation listing out the cryptographic commands available within iRules? Or e-mail the list to me if the list is too long. ("ch...

SNAT between virtuals

I have two virtuals on a v9.0.5 box. Each virtual has a pool with RFC1918 nodes in it. Outbound SNAT maps the RFC1918 space onto the VIP so my pools can only be accessed via it.     10.0.25.0/24 are SMTP servers, via 213.136.12.226:25   10.2.25.0...

Compatibility issue

I'm using some perl SOAP::Lite calls, specifically   ITCMLocalLB:Pool:get_member_list which presumably is   implemented as a compatibility call. But instead of   getting something like:     ARRAY(0x8e86080)   0 ITCMCommon::IPPortDefinit...

Simple rule to allow by network

I've tried a few different operators and am having some trouble doing the following:     Allow a URI to be passed to a pool based on the network it came from.....if it didn't come from an allowed network I would discard.     Example:     If ...

irule "stuck" in memory?

So I was trying to solve a cookie problem using irules. The rule didn't work the way I wanted, but now dispite removing it from the config and reloading the config, it still is processing the rule (when I do a tcpdump I still see the cookies getting ...

Persist based on a portion of SID

I have an application that returns URLs that look like this:   https://www.xyz.com/ires/en-us/html/SignIn?sid=JSNd.fstR2gz5Y.6&return-to=HomePage   The ".6" at the end of the "sid=" string uniquely identifies the server. How do I create a rule to p...

Redirect on UNC path

Hello,     I use a iRules to do alot of redirecting based on HTTP header properties like this:     if { [HTTP::uri] contains " text " }   {   [HTTP::redirect "http://www.website.com"]   }     and all works wonderfully. Now I wan...

HTTP Header

Hi,   I have to change the HTTP header authorization to include different username and password from the one that was received by BigIp for authentication.   If I add the following line of code in the "when AUTH_SUCCESS" event, I get compile-...

Multiple Auth

Hi,   Can someone post an example on how to do multiple authentication.   For example, first one could be radius auth and the next one could be ldap authentication.     Thanks!!!

intelligent SNAT using server_selected

I read post http://devcentral.f5.com/default.aspx?tabid=28&view=topic&forumid=5&postid=1540 and it was helpful. I am trying to do the same type of thing, but add 1 more piece. I have a BIG-IP with external and internal vlans. Each, their own subnet. ...