How to forward traffic to detached vlan?
VLANs are visible in management plane. It makes it possible to run local process that has access to such vlan (it allows to run custom applications on F5 appliance such as nodejs web servers). Is it possible to create vlan interface that is purely virtual (not assigned to any physical interface) and forward traffic to it from eg. ip forwarding vs? Ultimately I'd like to test one L2 analyzer "inline" by running it on F5 and forwarding traffic to it. Final packets flow I'd like to achieve would be something like this: world -> vlan_world -> ip_forward_vs -> vlan_detached_1 -> my_analyzer -> vlan_detached_2 -> vlan_lan -> lan or functional equivalent. my_analyzer app forwards L2 packets in software (behaves like bridge). If necessary I accept solution using iRules. For now the only solution I see is to use 2 conventional vlans assigned to interfaces and make short loop using physical cable but that would be waste of 2 interfaces which I'd prefer to avoid.
iRule for forward WideIP to external BIGIP DNS
Hi all, In F5 BIGIP DNS under DNS-GSBL-WIdeIP there is option/tab iRule. I would like to create iRule for the WideIP (NAPTR and A). Scenario: DNS Q test1.test.com(NAPTR) comes to PROD-BIGIP-DNS which has WideIP test1.test.com(NAPTR) and inside this WideIP I need iRule which will just forward ONLY this wideIP to other LAB-BIGIP-DNS listener IP address. NOTE: LAB-BIGIP DNS-listener is configured under PROD-BIGIP as Server/virtual server(Generic Host) because of optimization reasons. Regards, Boban
Forward to virtual and APM
Hi, I'm trying to define a Virtual Server as a Load-Balancer between multiple VS Load-balancing is based on hostname when HTTP_REQUEST { if {[HTTP::host] contains "test.mydom.com" } { log local0. "Site Test 1" virtual /Common/vs_test.mydom.com } elseif {[HTTP::host] contains "test2.mydom.com" } { log local0. "Site Test 2" virtual /Common/vs_test2.mydom.com } else { log local0. "SiteA" } } Everything is working fine except that APM inside vs_test1 & vs_test2 are not applied I'm able to connect to these VS without authentication Is there any limitation or is it by-design? Thank you Nicolas