Help for setting policy /iRule

[Sulabh_Srivasta]

Hello All,

I have a scenario where I have to use only one HTTPS Virtual server for multiple applications listening on different ports on different node, for example:

There are 3 servers , Node_X, Node_Y, Node_Z and VIP resolve to ww.abc.com

https://www.abc.com/core ----> https://Node_X:10004/core/

https://www.abc.com/service ----> https://Node_X:10004/service/

https://www.abc.com/ims ----> https://Node_X:10009/ims/

https://www.abc.com/portal ----> https://:Node_Y:10005/portal/

https://www.abc.com/ords----> https://Node_Z:10008/ords/

I created 4 pools as below but didn't attach any pool to the Virtual server:

Pool_X for Node_X - port 10004

Pool_X1 for Node_X - port 10009

Pool_Y for Node_Y - port 10005

Pool_Z for Node_Z - port 10008

I am using the following iRule but is is not working, please help how can I achieve this ?? Can I use policy or re-write policy ??

when HTTP_REQUEST {

 if { [HTTP::uri] starts_with "/core" } {

    use pool Pool_X

  } elseif { [HTTP::uri] starts_with "/service" } {

    use pool Pool_X

} elseif } [HTTP::uri] starts_with "/ims" } {

    use pool Pool_X1

} elseif { [HTTP::uri] starts_with "/portal" } {

    use pool Pool_Y

} elseif { [HTTP::uri] starts_with "/ords" } {

    use pool Pool_Z

  }

}

[Enes_Afsin_Al · Accepted solution]

Hi Sulabh Srivastana,

Remove use command.

when HTTP_REQUEST { if { [HTTP::uri] starts_with "/core" } { pool Pool_X } elseif { [HTTP::uri] starts_with "/service" } { pool Pool_X } elseif { [HTTP::uri] starts_with "/ims" } { pool Pool_X1 } elseif { [HTTP::uri] starts_with "/portal" } { pool Pool_Y } elseif { [HTTP::uri] starts_with "/ords" } { pool Pool_Z } }

switch version:

when HTTP_REQUEST { switch -glob [HTTP::uri] { "/core*" - "/service*" { pool Pool_X } "/ims*" { pool Pool_X1 } "/portal*" { pool Pool_Y } "/ords*" { pool Pool_Z } } }

without using pool:

when HTTP_REQUEST { switch -glob [HTTP::uri] { "/core*" - "/service*" { node 1.2.3.4 10004 } "/ims*" { node 1.2.3.4 10009 } "/portal*" { node 5.6.7.8 10006 } "/ords*" { node 9.10.11.12 10008 } } }

[Sulabh_Srivasta]

Hi Enes,

Thanks for your response, I tried but none of the given solution is working. Please let me know if I am missing something.

[Enes_Afsin_Al]

Hi,

when HTTP_REQUEST { log local0. "requri0: [HTTP::uri] - cip: [IP::client_addr]" if { [HTTP::uri] starts_with "/core" } { log local0. "requri1: [HTTP::uri] - cip: [IP::client_addr]" pool Pool_X } elseif { [HTTP::uri] starts_with "/service" } { log local0. "requri2: [HTTP::uri] - cip: [IP::client_addr]" pool Pool_X } elseif { [HTTP::uri] starts_with "/ims" } { log local0. "requri3: [HTTP::uri] - cip: [IP::client_addr]" pool Pool_X1 } elseif { [HTTP::uri] starts_with "/portal" } { log local0. "requri4: [HTTP::uri] - cip: [IP::client_addr]" pool Pool_Y } elseif { [HTTP::uri] starts_with "/ords" } { log local0. "requri5: [HTTP::uri] - cip: [IP::client_addr]" pool Pool_Z } }

Can you investigate the logs on cli and pool stats on gui?

tailf /var/log/ltm | grep requri

[Sulabh_Srivasta]

I can see client IP as my IP (I am the tester) and SNAT IP, the iRule is being executed but traffic is not hitting the pool, no hits on pool.