iRule LX replacement on bigip-Next
Hi all - we use ILX on our current bigip platform and wanted to understand what will be alternate for it in the NEXT platform. my use case is - when a HTTP request comes in the F5 extracts some information out of the request along with the client IP . the ILX part makes a REST call to an external URL with that information . if it returns a 200 response - the HTTP request is allowed to move forward to the pool . if a 403 is returned from the external service a reset is sent back. how can i do the same in bigip-Next - as we have nodejs code performing this tak. Thanks
HTML5 support for RDP
I there any support for HTML5 for RDP connnections behind F5 without using a client? Or even possible with a client? The use case is to have a webtop with a link to establish an RDP connection but we would like to have it via HTML5 embedded. Looking at the following artcile it indicate it is not supported can someone confirm? https://my.f5.com/manage/s/article/K08943176#link_06_05APM - Capture Login sharepoint
Hello everyone, I need some help. I'm not very good with APM, but my question is: --- I have an application published in APM, and all accesses are OK. However, I received a request to publish the application in sharepoint (hyperlink). However, when placing the application hyperlink in sharepoint, the application is opening the long page (APM) and requesting login again. My challenge is: Collect the user logged into sharepoint and use it to perform SSO in my application, without the need to go through the Logon Page NOTE: Today, my Sharepoint and F5 APM is integrated with Active Directory (not Azure AD). Is it possible with APM to collect the user logged in to Sharepoint and perform SSO in the APP? Regards PauloUnexpected Error: UCS loading process failed
Hello, I'm taking the LTM Essentials course online. There are different labs and before each lab, I need to upload a UCS file and restore it. But when I do the restore, I receive the following error: Unexpected Error: UCS loading process failed. It is impossible to have the restore working. Somebody would have an idea how to troubleshoot this? Thank you, Vinch
SysLog UDP Load Balancing
Hello, 1st of all I require some guideline/suggestion here. I am configuring a Virtual Server from F5 listening on 514 and translating port to 8514 at backend servers. Idea is Systems will send the syslog through this F5 and F5 VIP will eventually send logs to Backend Syslog Connectors. Traffic Flow is like below Client >> F5 VIP_IP [ 2.2.2.2] ( Service Port 514 ) ( UDP Profile with FastL4 Profile ) -- >> Backend Syslog Connector 2.2.2.6, 7 on 8514 Port. Clearly to specify VIP IP and Backend IP are in the same subnet hence I do not need to enable SNAT. Also I was thinking if I enable SNAT at backend how do they identify actually who send the Log. What is the Guideline for this to make sure Syslog can see actual source and Syslog Servers follow return traffic through F5 ?. ( Note that Servers gateway are at Network Device not in F5 ) Also if I set monitor TCP or Gateway ICMP Pool Goes Down. Pool is live only if I set Monitor as UDP. Why is that ? How I should check that UDP Traffic is load balanced. But this is less important as I need to be sure about the Traffic Flow. Please advise. Below is the Virtual Server Config tmsh list ltm virtual Virtual_Server all-properties [api-status-warning] ltm/virtual, properties : deprecated : mobile-app-tunnel, urldb-feed-policy ltm virtual Virtual_Server { address-status yes app-service none auth none auto-lasthop default bwc-policy none clone-pools none cmp-enabled yes connection-limit 0 creation-time 2020-02-25:18:47:05 description "Supports Syslog" destination 2.2.2.2:514 enabled fallback-persistence none flow-eviction-policy none gtm-score 0 ip-protocol udp last-hop-pool none last-modified-time 2020-02-25:20:04:58 mask 255.255.255.255 metadata none mirror disabled mobile-app-tunnel disabled nat64 disabled partition Common per-flow-request-access-policy none persist none policies none pool SYSLOG_Pool profiles { fastL4 { context all } } rate-class none rate-limit disabled rate-limit-dst-mask 0 rate-limit-mode object rate-limit-src-mask 0 related-rules none rules none security-log-profiles none service-down-immediate-action none service-policy none source 0.0.0.0/0 source-address-translation { pool none type none } source-port preserve syn-cookie-status not-activated traffic-classes none traffic-matching-criteria none translate-address enabled translate-port enabled transparent-nexthop none urldb-feed-policy none vlans { vlan_222 } vlans-enabled vs-index 97 }Unable to create F5 in AWS via CFT - no internet access
Hello, I ma having bad times while creating deployment in AWS from templates without internet access: https://github.com/F5Networks/f5-aws-cloudformation-v2 I already deployed yaml and runtime package on apache server in VPC. Based on tcpdump, the F5s are doenloading configuration files correctly. But then there is some wget timeout in EC2 Console. I think its trying to download some other stuff, yet I have no idea how to modify the runtime package. Can even open it via tar or gzip. Does anyone know how to do this? Customer does not want to allow internet access and proxy is not supported by CFT templates. Thank you Best regardsApplication drop down menus does not work behind F5 APM Portal Access
Hi, I have configured an application behind APM with portal access. When users reaching applicationon portal they can not see drop down menus on application. When I inspect network, there is no error on links. However, I have a problem on console saying "Sync load uicomponents xxxxx.xml". Do you have the same issue? How can I solve that problem? Best Regards,
About ePVA question ?
hi everyone: I'm having some issues having to disable the global epva feature, I'm using an i10600 model device. The daily concurrent connections are around 1.5 million. I would like to ask if turning off the epva feature will put a lot of burden on the CPU? Solving the problem https://my.f5.com/manage/s/article/K44895409
