Policy & Irule on VIP

[Sagar_Parab]

If I mapped WAF policy and irule on VIP, then when traffic will come on VIP, what will execute first ,WAF policy or irule?

Thanks & Regards,

Sagar

[Daniel_Wolf]

Hi Sagar,

it depends on the iRule Event. Take a look at this flowchart to understand when the WAF policy is evaluated and which iRule events happen before, while and after WAF policy evaluation.

In this devcentral post (Getting Started with iRules: Events & Priorities) there is a link to a PDF that is explains it very good. Link to pdf

There is also bit newer devcentral post here, but the flowchart is focused on APM:

iRule Event Order Flowchart

Furthermore this YT video, though 4 years old, is very helpful to understand in which order traffic is processed on the BIG-IP.: BIG-IP Life of A Packet

KR

Daniel