Forum Discussion

Cirrus

Sep 22, 2022

Solved

URL/URI rewrite without changing in Client browser

Hello All Experts, Greetings! I have an issue where I need to rewrite URL and as well as URIs from https://abc.com/xyz to https://pqr.com/mnp. I found two ways to do that one I can use a profil...

application delivery

Kevin_Stewart
Oct 06, 2022
I'd maybe argue that partitions aren't create separate logical BIG-IPs. It's more about building separate administrative domains on a single BIG-IP. Further, partitions can always access the /Common partition. To answer your question though, it depends on the level of isolation, but you should simply be able to point to the VIP in the oter partition,

virtual "/abc-app-dev/np-api-vip" or virtual "/Common/abc-app-dev/np-api-vip"

You don't need SNAT to communicate between VIPs on the same BIG-IP.
NathPras
Dec 08, 2022
Hi Kevin,
Thanks for your guidance. Here is what I figured out and it is working now. All happened due to your idea so thanks again.

IRule for same routing domain :-

when HTTP_REQUEST {
log local0. "Incoming request: [HTTP::host]:[HTTP::uri]"
if { [set match [class match -value -- "[HTTP::host]:[HTTP::uri]" starts_with datagroup_Name]] ne "" } {
log local0. "Datagroup match: $match"
## Get first URI path in client request
set FIRSTPATH [getfield [HTTP::path] "/" 2]

## Split match into host and path
set matchlist [split $match ":"]
set MATCHHOST [lindex $matchlist 0]
set MATCHPATH [lindex $matchlist 1]

## Replace FIRSTPATH with MATCHPATH (from full HTTP::uri)
set UPDATEDPATH [string map [list "/$FIRSTPATH" "$MATCHPATH"] [HTTP::uri]]
log local0. "Updated host: $MATCHHOST"
log local0. "Updated path: $UPDATEDPATH"

HTTP::host $MATCHHOST
HTTP::uri $UPDATEDPATH

virtual "/path/virtual_server_name"

}
}

For different route domain

when HTTP_REQUEST {
log local0. "Incoming request: [HTTP::host]:[HTTP::uri]"
if { [set match [class match -value -- "[HTTP::host]:[HTTP::uri]" starts_with datagroup_name]] ne "" } {
log local0. "Datagroup match: $match"
## Get first URI path in client request
set FIRSTPATH [getfield [HTTP::path] "/" 2]

## Split match into host and path
set matchlist [split $match ":"]
set MATCHHOST [lindex $matchlist 0]
set MATCHPATH [lindex $matchlist 1]

## Replace FIRSTPATH with MATCHPATH (from full HTTP::uri)
set UPDATEDPATH [string map [list "/$FIRSTPATH" "$MATCHPATH"] [HTTP::uri]]
log local0. "Updated host: $MATCHHOST"
log local0. "Updated path: $UPDATEDPATH"

HTTP::host $MATCHHOST
HTTP::uri $UPDATEDPATH

pool pool_name

}
}

NathPras

Cirrus

Oct 06, 2022

Here when you mention /common is it refering to the partion common of BIG IP. Would be "common' in the syntax or the parttion the VIP is sitting.

Example "/abc-app-dev/np-api-vip"

Kevin_Stewart

Employee

Oct 06, 2022

Correct, it's just the path to the virtual server.

NathPras
Cirrus
Oct 06, 2022
Just to confirm one more thing if these are VIPs are into two separate partition (Two different BIG IPs logically) this same "virtual" command should work as command "virtual" is referring to another VIP here to get land the traffic in the referred VIP.
NathPras
Cirrus
Oct 06, 2022
or it would be something like this

virtual "common/np-api-vip" snat automap
because these two VIPs are in different BIG IPs
Kevin_Stewart
Employee
Oct 06, 2022
I'd maybe argue that partitions aren't create separate logical BIG-IPs. It's more about building separate administrative domains on a single BIG-IP. Further, partitions can always access the /Common partition. To answer your question though, it depends on the level of isolation, but you should simply be able to point to the VIP in the oter partition,

virtual "/abc-app-dev/np-api-vip" or virtual "/Common/abc-app-dev/np-api-vip"

You don't need SNAT to communicate between VIPs on the same BIG-IP.
NathPras
Cirrus
Oct 06, 2022
Hi Kevin,
I used the iRule as following :-

when HTTP_REQUEST {
log local0. "Incoming request: [HTTP::host]:[HTTP::uri]"
if { [set match [class match -value -- "[HTTP::host]:[HTTP::uri]" starts_with url_datagroup]] ne "" } {
log local0. "Datagroup match: $match"
## Get first URI path in client request
set FIRSTPATH [getfield [HTTP::path] "/" 2]

## Split match into host and path
set matchlist [split $match ":"]
set MATCHHOST [lindex $matchlist 0]
set MATCHPATH [lindex $matchlist 1]

## Replace FIRSTPATH with MATCHPATH (from full HTTP::uri)
set UPDATEDPATH [string map [list "/$FIRSTPATH" "$MATCHPATH"] [HTTP::uri]]
log local0. "Updated host: $MATCHHOST"
log local0. "Updated path: $UPDATEDPATH"

HTTP::host $MATCHHOST
HTTP::uri $UPDATEDPATH
virtual "/Common/np-api-vip"
snat automap
}
}
While cheking the tcp dump found that VIP of api-tint.blah.com is resetting the connection and error showing as Route domain not match. We tried to with disabling strict isolation on VIP of api-tint.blah.com but result is same(although this time we did not captired the logs)
Kevin_Stewart
Employee
Oct 06, 2022
Try disabling strict isolation and setting both to use the same (0) parent.
NathPras
Cirrus
Oct 12, 2022
Hi Kevin,

I know it would be a silly question but do I need to add virtual server IP of np.api.us.test.cnb as a pool member to Virtual server api-tint.blah.com or the front end iRule will forward the traffic to target virtual server np.api.us.test.cnb with command "virtual"?
Kevin_Stewart
Employee
Oct 12, 2022
No. Pooling to another VIP on the same box (in the same route domain) doesn't work.
NathPras
Cirrus
Oct 12, 2022
Hi Kevin,
Both the VIPs are in different route domains.
Kevin_Stewart
Employee
Oct 12, 2022
Still no. I probably confused the issue adding a note about route domains. Normally to pool to a VIP across route domains, you have to physically leave the box and return. Without doing that, you can't simply pool to another VIP. That's what VIP targeting is for.
NathPras
Cirrus
Dec 08, 2022
Hi Kevin,
Thanks for your guidance. Here is what I figured out and it is working now. All happened due to your idea so thanks again.

IRule for same routing domain :-

when HTTP_REQUEST {
log local0. "Incoming request: [HTTP::host]:[HTTP::uri]"
if { [set match [class match -value -- "[HTTP::host]:[HTTP::uri]" starts_with datagroup_Name]] ne "" } {
log local0. "Datagroup match: $match"
## Get first URI path in client request
set FIRSTPATH [getfield [HTTP::path] "/" 2]

## Split match into host and path
set matchlist [split $match ":"]
set MATCHHOST [lindex $matchlist 0]
set MATCHPATH [lindex $matchlist 1]

## Replace FIRSTPATH with MATCHPATH (from full HTTP::uri)
set UPDATEDPATH [string map [list "/$FIRSTPATH" "$MATCHPATH"] [HTTP::uri]]
log local0. "Updated host: $MATCHHOST"
log local0. "Updated path: $UPDATEDPATH"

HTTP::host $MATCHHOST
HTTP::uri $UPDATEDPATH

virtual "/path/virtual_server_name"

}
}

For different route domain

when HTTP_REQUEST {
log local0. "Incoming request: [HTTP::host]:[HTTP::uri]"
if { [set match [class match -value -- "[HTTP::host]:[HTTP::uri]" starts_with datagroup_name]] ne "" } {
log local0. "Datagroup match: $match"
## Get first URI path in client request
set FIRSTPATH [getfield [HTTP::path] "/" 2]

## Split match into host and path
set matchlist [split $match ":"]
set MATCHHOST [lindex $matchlist 0]
set MATCHPATH [lindex $matchlist 1]

## Replace FIRSTPATH with MATCHPATH (from full HTTP::uri)
set UPDATEDPATH [string map [list "/$FIRSTPATH" "$MATCHPATH"] [HTTP::uri]]
log local0. "Updated host: $MATCHHOST"
log local0. "Updated path: $UPDATEDPATH"

HTTP::host $MATCHHOST
HTTP::uri $UPDATEDPATH

pool pool_name

}
}