custom
10 Topicscustom metadata and icontrol REST
Hi all, We've developed an application that is able to create a load balancer using iControl REST based on "profiles". A profiles basically is a number of settings specifically designed for an application. At this time we have multiple HTTP load balancer profiles and 1 protocol neutral TCP load balancer. Creating a load balancer using these profiles works pretty ok; we can create, delete, read and update a limited set of parameters. We want our systems to be able to determine which - if any - profile was used to create the load balancer and we haven't found a way yet, mainly caused by the variety of load balancers. Probably obvious, but we don't want the manner we're selecting to consume too much system resources. And we don't want to abuse a description field. Is there anyway to store custom metadata, something like a string, in the F5 and link it to a Load Balancer. We're using just one partition at this time. Thanks!Solved636Views0likes5CommentsCustom error page iRule with IP address filtering
Hi, I'm not good with writing iRules so I would like some help. :) We have a BIG-IP device with LTM and AFM provisioned. Customer would like us to configure the following. They have a list of public IP addresses that are allowed to reach/connect their server in our infra. They want to allow these addresses to access the server, but anything else besides these IPs should be redirected to a custom "underconstruction.html" page. So I'm guessing the iRule would look like something like this: if allowed ips try to access SERVER then forward traffic to POOL else redirect to underconstruction.html I'm bad at progamming, so this is all I got, I wouldn't know how to program this. :) Or can this be done with LTM policies? Any help is very much appriciated.Solved451Views0likes2CommentsExec of awk to return value of custom snmp oid
Hi, I've defined a custom oid in /config/snmp/custom_mib.tcl as follows: register_mib ".1" limitconn GAUGE proc limitconn {} { set status [catch {exec tail -1 /var/log/irule_limitconn | tr -s \ | cut -d\ -f11} result] return $result } It works fine, but when I redefine the command to use awk (to handling easily the whitespace as field separator): exec tail -1 /var/log/irule_limitconn | awk '{print $11}' It doesn't work, I always get 0 as result. I've tried different escape sequences for the ' and { in the awk command as: exec tail -1 /var/log/irule_limitconn | awk \'{print $11}\' without any luck... can't I use awk here? Thanks!401Views0likes2CommentsHSTS for Custom Response page
Hi, I have HSTS enabled on a number of sites via an iRule(I have also tried on the http profile) however I have noticed that when the custom response page is tried in ASM the page does not have the HSTS header in the response. I understand that the F5 inserts the hsts information on the response from the server as it passes through the F5 back to the client but in this case the request never makes it to the server, but it does make it to the F5. The F5 blocks the requests for any number of reasons defined in the policy and responds with the custom response page. While I do see the HSTS header when browsing the site, I do not see the HSTS header when the custom response page is served. Is it possible to enable HSTS for the custom response page? One of our apps requires a number of parameters to be passed to it in order to load. If a user browses directly to the domain the custom response is served. As a result ssllabs scans do not detect HSTS.399Views0likes2CommentsUnusual health monitor.
Hello, Is it possible to monitor a node which is not part of a pool, and mark the pool down when the monitor fails? I've managed to create health monitor with custom POST query which works fine, but the requirement is to NOT send any production traffic to the destination node. It's for monitoring purpose only. Anyone come across a similar scenario? Regards MariuszSolved379Views0likes2CommentsNeed to edit form_header APM sign-on page
I found where to edit this in the GUI, I just need the proper syntax. Let's just say I wanted to say. "Thanks for coming - Please login" instead of "Secure Logon for F5 Networks" So Under Customization > Advanced > Access Profiles > Logon Pages > Browser Logon Page > logon.inc $formHeader = '%[form_header]'; . . . . header.innerHTML = "";334Views0likes5CommentsCustom Message using iRule for Runtime Error
Our application throws a runtime error during few code testing in our Test lab. We do not want this error to be displayed when browsed externally via internet. I'm looking for an iRule that will present a custom message like 'Oops' whenever web server returns below error message - Server Error in '/' Application. Runtime Error226Views0likes1Commentsend and recieve string health monitor clearification
Hey guys, I was wondering if I can some clarification on http and https health monitors. The default http and https monitors, do they just send a http request 5 seconds by default. Sending a GET / in the send string. Is the send string in the http monitor sending or is it sending a GET a string ? And is that done in the request headers ? The receive string, is that whats going to be the response headers on the monitor? Any clarification would be helpful Thanks195Views0likes1CommentServing a difference Custom Error based on Country for the same ASM policy
Hi, We have 2 similar applications using the same ASM policy. As an example, lets say foo.com.au and foo.co.uk. We have a custom error page defined in the ASM policy along with contact details. Ideally we would want users coming from .com.au site or from AUS geo code to be served the AUS contact details and users coming from .co.uk or from a UK Geo code, to be sent to a different custom error page with UK contact details. Is anyone able to discuss how this can be done? Thank you.162Views0likes1Comment