Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner

Forum Posts

Decrypting SSL SOAP traffic

I'm using Soap::Lite to do my iConrol work. I've been trying to   track donw a rather insidious bug, that proves to be hard to   find. I'd like to be able to decrypt the iControl data stream   to the BigIP using ssldump (i.e. capture my data usin...

WSDL - Common conflicts

I've got a ASP.NET application in C that is using WSDL files for 9.x and 4.x interfaces.     I'm using several different WSDL files in this application, but many of them has their own definition of things like CommonIPPortDefinition and LocalLBObj...

bigip 4.5.11 duplicate requests

hey..im having an issue with duplicate requests being send from the bigip to our oracle app server and i was wondering if anyone else has experienced ths.     basically, a client request will come into a uri in our APP server pool, the request w...

Problem with elseif

Okay, this is driving me nuts...I'm trying to get a simple nested if statement working and it's not.... This works: when HTTP_REQUEST { if {[HTTP::host] equals "dev.domain.com" } { if { [HTTP::u...

rule for blocking DNS/UDP 4.2.x

Hi there,     Can someone confirm that this would be the correct method to block DNS/UDP packets from a class of IP's. This is in addition to an existing rule.     else if (server_port == 53 and client_addr == one of DNS_BLOCK) {   discard ...

http forwarding with irule

hello,     I will confiugure a irule to forward to specific URL     the connection will be open to my VIP https://server1.com/123/456.html   and the BIGIP should forward this to http://testserver.de/123/456.html     my suggestion     whe...

HTTPS Persistence & ISA servers

We have 2 BigIP-5100's running BIG-IP Kernel 4.5.10 Build84 in an active-actve pair. We have a squid pool with predictive node load-balancing and a virtual server for all of our clients that browse the web. Currently, we have a workaround in place ...

Modify URI passed to servers ?

Howdy. I've a quick question to ask regarding iRules...     Is is possible to identify urls of the form:     http://thisismysite.com/aDirectory/aScript?par1=Type125&par2=2 etc...     Modify them to a slightly different form:     http://th...

xsd:int to short type conversion problems

I'm trying to use the "get_wideip_attribute" web service method and recieve the error "Unable to set 'ttl' property: argument type mismatch." I'm assuming this has to do with the SOAP type definition of "WideipAttribute" and the Java implementation o...

Statistics for server response time

Can the statistics provided from PoolMember::get_statistics provide me with the average and maximum response time of the pool member for traffic through BigIP?     The statistics STATISTIC_MEAN_CONNECTION_DURATION and STATISTIC_MAXIMUM_CON...

Help me convert 4.x Rule to 9.x iRule

I built a rule based on everything I could find for examples and documentation in the LTM configuration guide and on devcentral, but I'm not able to get around syntax errors. I'll greatly appreciate any help in converting the 4.5.9 Rule below to a 9...

Concurrent connection limit

Hi,     We are using Big-IP 6400 in our network for managing of 30-40k concurrent connections with 4-5 comprehensive rules.     Now, I would like to limit concurrent connections from the same client IP to our virtual servers (e.g. less than 10 ...

rules for v 4.x

Are there any formal resources for rules for 4.x?     Or is it simply what you can find outside of this site on the internet at large (and in f5 support docs, etc).

access_log equivalent for a virtual server

Hi,     We have a VS that chooses a pool from the URI which contains the customer (each customer has their own backend servers but access through a common URL scheme so there's only one SSL certificate involved and it works well for us).     ht...

SSL Acceleration for SOAP /XML Service

  I would like to know if we have to write a specific iRule with a BIG-IP in v9 to do SSL Acceleration on a SOAP/XML Web Service ?       1*/ Does the BIG-IP rewrites all the content of the .wsdl automatically - ie transform the http references...

Rules Problem

We just upgraded from 4.2 LB to 4.5.10 HA software on our Dell platform 2650 poweredge. We purchased this upgrade so that we could utilize rules based filtering of traffic based on a certain URI. We had an F5 partner perform the upgrade and write the...

persistance accross datacenters?

would it be possible to use persistance to send specific url's to specific data centers using 3DNS 4.5? for example, we have 2 url's... www.url.com/123 and www.url.com/456 i want all /123 requests to goto datacenter A and all /456 requests to goto d...

http_header persistence

Hi All,     I would like to use the persistence http_header feature from the 4.5x on the 9.0.4, this should be done somehow via universal persistence and a special iRule, does someone knows how to do this?     Some more details :   We have a h...

Java SOAP Binding using Apache Axis

I'm using Apache Axis 1.2 WSDL2Java utility to create Java interfaces from the 4.6.2 WSDLs. However, I'm running into problems with data type mapping during bean (de)serialization. Here is the exception that's being thrown: Mar 2, 2005 12:41:...

Help with persist command

I need some help with the persist command. It's been a long day so I'm probably not thinking straight anymore.     I have an IP address and a string and when I find the same string in another HTTP request I want to send that to the IP address I ha...

Need help with an irule to determine path

We have a requirement for our external customers to present a valid certificate. We have a rule for this, but we need a rule in front of this one that says anybody coming from our internal/trusted ip range gets passed straight to the pool and not to ...

BIGIP 9.0.4 irule checking session ID

Customer seeing their SSL Connections being timed out due to the redirect rule they have.   They have a requirement for this redirect if the client cert is bad. They need to find away for it to only check the session id once when connection is cre...

Will iRule ICAP ??

I have some questions regarding the BIG-IP capacity to analyse the ICAP protocol. I know ICAP is somehow similar to HTTP but I am wondering if     1*/ BIG-IP is able to analyse ICAP messages and persist based on an ICAP Header where the user info...

Terminal Server Persistence

I have msrdp persistence working without a rule, but only within a single vip. Globally, I don't have persistence to the client, so a client could potentially be assigned to the wrong vip, and even though session directory sends the client the routi...

JRahm by Community Manager
  • 354 Views
  • 18 replies
  • 0 kudos

syntax error- pki client cert count rule

Hoping someone can take a look at this rule copied from 9.0.1 GUI & tell me what's wrong with it. GUI doesn't report an error, but config won't load with this rule on 9.0.1 or 9.0.4. At the command line, bigpipe load command results in a syntax err...

Session Limits for SSL sessions in iRules ??

I currentley have a couple of SSL-VPN boxes being managed by Big-IP (Not Firepass unforts..), and they are liscenced up to 1000 users per unit.     I also have 3DNS LB across 2 DC's each has one of the Neoteris in it.     I need to get my Big-I...