cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

On an LTM virtual server, does i-rule processing preceed the connection profile or is it the other way around?

Wasfi_Bounni
Cirrostratus
Cirrostratus

Hi;

 

Let's say we have a load balancing virtual server listening on port 80, and let's say that we define a connection profile on it, which forces the http traffic to move to an internal virtual server.

 

Also, on the "External virtual server" listening on port 80, we have bound an i-rule to it.

 

My question is: does i-rule processing preceed the connection profile processing or is it the other way around?

 

Kindly

Wasfi

1 ACCEPTED SOLUTION

ah, yeah that is quite possible.

View solution in original post

3 REPLIES 3

boneyard
MVP
MVP

what exactly do you mean with a connection profile? the APM one or OneConnect?

 

in any case it depends on the iRule event, some trigger earlier, some later, have a look at:

 

https://clouddocs.f5.com/training/community/irules/html/class1/module1/iRuleEventsFlowHTTPS.html

Wasfi_Bounni
Cirrostratus
Cirrostratus

Sorry Boneyard. I meant a connector profile, which can be used to relay the http request to an internal virtual server. It seems like the external virtual server can only process irules with client_accepted events prior to sending the connection via the connector profile to the internal virtual server. It does not seem like an irule with a http_request event can be processed prior to sending the connection via the connector profile.

ah, yeah that is quite possible.