APM - Provide file at access policy logon page stored on the APM
Hello community, I have to add a download link (help file; .pdf format) to a custom logon page. I could of course place this file on a web server but I'd like to store the file directly on the APM. I've found something about "Hosted content" (http://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-hosted-content-implementations-11-4-0/1.html) but I really don't know if this is what fits my need and second...we run 11.3 at the moment. Any idea would be appreciated. Best regards, h0nkyRead dynamic file in LB internal datagroup
We have list of whitelisted IP stored in remote .csv file, file gets updated ever 5 hours with new set of IP. Currently we read file in perl and update internal data group. In LB using iRule we allow or block IP in making succesful connection to pool members by reading data group. During the time of reading and updating data group, connections are getting dropped around 5 to 10 mins We are replacing content of datagroup and adding each entry, this may not be best approach but there is no easy way to retrieve existing datagroup values and compare with .csv and do intelligent diff No of IP has grown from 10 to 1400 IPs and it might go to 5000 Since it is working for a while, facing issue recently probably because of scale, it will be difficult to change entire logic. but can make minor changes to existing logic/script #File content is delimited and stored in bcontent my @bcontent = split("," , $tmp); #print @bcontent; my $entry = ''; my $first_cm = 1; foreach $entry(@bcontent) { $entry =~ s/^\s+|\s+$//g; if ( $first_cm ) { $cmd = "$tmcom modify ltm data-group internal $BLDG records replace-all-with { $entry }"; system("$cmd"); } } else { $cmd = "$tmcom modify ltm data-group internal $BLDG records add { $entry }"; system("$cmd"); } }BIG-IP : create data-group fails with format error
f5 BIG-IP LTM VE v11.4.0 on ESXi I am attempting to create a new data-group : Type = "(External File)" File Contents = "String" Key/Value Pair Separator = ":=" My external data-file 'test.txt' : "test-1" := "test-1", "test-2" := "test-2", What is strange is that I've previously successfully loaded data in exactly this format. However, now I receive this error : 0107169a:3: The data group external file (/config/filestore/.stage_d/107479_d/Common_d/data_group_d/:Common:test_57194_1) has an invalid format, line: 2. I've tried removing the final comma on line 2 : "test-1" := "test-1", "test-2" := "test-2" but receive the same error. With a single row : "test-1" := "test-1", the data loads with no error.
Webtop links auto published
Hey guys, We're looking to build an automated deployment platform for customers. The problem I am running into is publishing a webtop with only links that the customer has access to. In most scenarios this could be to RDP sessions, vpn's, etc. I haven't found a way to do this via an irule, xml, text doc, smoke signal, etc yet. Alternatives I've also considered include AD (i.e. AD lookup, pull attributes, publish links for the three devices the user has listed). Does anyone have any thoughts on reading in a file, list, or lookup to then create objects on the webtop? I appreciate any thoughts or insights.
Shift XP BKF File into Windows 7 & Windows 8 OS
Presently time, many software developer companies have discovered much BKF file recovery software even launched at the market for giving users best solution to defeat corruption issues of windows XP BKF file. But right now, big part of users wants to shift XP BKF file into windows 7 or windows 8 in easy way. Hence, we have developed or consolidated a furnished windows backup file recovery software by which this application you can move and restore windows XP backup file in windows 7 & windows 8 operating system.iRule to read dynamic file in /tmp/ location
Hi All, I've been trying to figure out if there is a way for an iRule to read from a file located in the /tmp/ directory on itself (LTM). The reason for this is I have a script running as a cronjob on the LTM to generate a unique string that I want to be able to manipulate and use in this iRule. So in summary, can an irule read from a location on the itself(LTM) and store it as a string? Thanks!Referral ID causing illegal file type errors
Hi Guys, Our marketing team is paired with some partners that require things such as &id=xyz.abc in the url. These values are unique and never. eg, for another referral, it may be &id=qaz.wsx. The issue here is that since these IDs are passed in the URL, they are blocked due to being identified as an illegal file type. I there some way to allow these that is supported in the GUI? I have been using an iRule that will unblock once blocked however that is not ideal as it has some limitations. The business is prepared to use the unblocking iRule due to it's limitations. Thank you
Slow file upload when ASM is enabled
Hello, We have a web application where image uploads are painfully slow (x2) when ASM is enabled. Virtual: ltm virtual /PART/uat-app-vs { destination /PART/127.0.0.1:https ip-protocol tcp mask 255.255.255.255 partition PART persist { cookie { default yes } } policies { /ITSS/asm_auto_l7_policy__uat-app-vs } pool /ITSS/uat-app-pool profiles { /ITSS/uat-app-ssl { context clientside } http { } no-reject-dos { } oneconnect { } tcp { context clientside } tcp-lan-optimized { context serverside } websecurity { } } rules { maintenance-unavailable-rule clickjack-hsts-rule secure-cookie-rule /PART/acg-rewrite /PART/show-error-page-rule rewrite-x-fw-for-rule } security-log-profiles { "Log illegal request and response" } source 0.0.0.0/0 source-address-translation { type automap } vlans { EXT-11 } vlans-enabled vs-index 460 } ASM has the following URL configuration: Any ideas why?
Block Skype File Transfer with SWG
Dear all, under Access Policy -> Secure Web Gateway -> Applications, there were only skype, login, update for Instant Messaging category. Latest database downloaded for v12. Would like to ask if anyone has this requirement of blocking only file transfers on Skype but allow voice and chat functions. There are other ways to do this such as editing the end point's registry but would like to know blocking of transfer function can be done at SWG level. Thanks!
