Using ip filter-list on Linerate causes connection reset for *ALL* requests
My setup: LineRate version 2.6.1 running in master/failover mode on VMWare When using the ip filter-list feature of the LineRate software, instead of filtering on the source addresses in the list, the LineRate sendsconnection resets for ALL incoming HTTP traffic to the virtual-ip the filter is applied to, whether the source address was listed in the rule or not. Example ip filter-list config: ip filter-list bad_actors 2 deny 104.199.152.55/32 Then this is applied to a virtual-ip: virtual-ip vip_myvip ip address 1.1.1.1 80 base vipbase_default attach ip-filter bad_actors As soon as that is applied, the LineRate begins responding with a connection reset. My IP address is obviously not IP in the deny line. Removing the filter from the virtual-ip with no attach ip-filter bad_actors will restore connectivity. What's going on here? Does the use of a filter-list require at least one permit line to allow traffic? If so, the docs do not mention that at all, nor is it possible to say permit any . What do I need to do in order to be able to deny incoming traffic from certain source addresses?449Views0likes2CommentsLinerate 2.6.1 / Socket.IO - Express
Suppose a farm of Nodejs servers, running Express and Socket.IO, without any reverse proxy such as apache or nginx. Express and Socket.IO are running in HTTPS Is Linerate support Express and Websocket ( socket.io ). I tried to several setup such as VIP ( HTTP:443 ) ---> VS ( HTTP ) ---> RS ( HTTP ) with the right SSL Profile and Hostname or VIP ( TCP:443 ) ----> VS ( TCP ) ----> RS ( TCP ) with the right SSL profile and Hostname Nothing to do, this does not work and claiming for 404 not found. However, with the same setup for regular PHP Backends it was working. Any advices ? Is there any online ressources on how accomplish this setup on linerate ?347Views0likes1CommentI'm unable to upgrade an active LineRate license from one tier to the next
I just upgraded a Tier 3 LineRate subscription Tier 4, but license refresh base does not upgrade the license. I see this repeated in /var/log/controller.messages : Nov 24 16:42:03 LROS LROS: ERROR: Failed to obtain a license: I replaced all of the license key info with XXXXXX below. None of the emails contained x's. I received several emails after the purchase. The first said my 100M subscription expired. The second was a subscription confirmation that said: Upgrade RegKey XXXXX-XXXXX-XXXXX-XXXX-XXXXXX to plan_code tier_250_monthly from tier_100_monthly along with total due, tax and what I paid. The third email was titled "Registration Key AddOn Change Request" and looked like the normal registration key email, but was kind of odd: The contents were: Subscription ID XXXXXXXXXXXX Registration Key F5-ADD-LR-100M-M removed F5-ADD-LR-100M-M removed XXXXX-XXXXX-XXXXX-XXXX-XXXXXX (HA Pair) F5-ADD-LR-250M-M added That regkey there represented by the x's is the HA pair key and is the same key my current ha pair uses. The key for the active load balancer was not included for some reason. Very confusing. Can someone please he me figure this out? I'm about to be screwed over by this. I upgraded because I need the limits raised...597Views0likes8CommentsLineRate: License is expired - no auto renewal
Upon first time setup and configuration I was able to activate the license and get the system up and running. In the last week we've noticed on the server that the prompt on the CLI interface is once again listing itself as UNLICENSED:User and that we can no longer get a response by pinging our EM1 interface. In our testing and troubleshooting around this issue we've confirmed that: 1.) auto-activation is enabled - this has not made a difference in terms of actually being activated. 2.) Manually activating does not make a difference on the system. 3.) In bash, we are able to ping activate.f5.com and api.f5.com - and ping 8.8.8.8 and other public dns servers. 4.) Creating a new account - therefore obtaining a new phone-home user, regkey, and subsequent license - and attempting to update the instance with these new details has not produced a solution. 5.) We have started from square one, setting "no license", no regkey, and no phone-home in CLI, writing the changes, and then resetting these values using the new details in step 4. 6.) Show licensing detailed produces the following output: State: License is expired. Bundle upload has not occurred. Status: inactive Inactive reason: License is expired. Bundle upload has not occurred. Expiration: 02/11/2016 14:18:57 Username: n/a Version: 5b UUID: 422E12CE-68CC-B4B0-D90A-262BF0679E50 HTTP Requests Per Min: 180 TCP Connections Per Min: 120 Mb Per Sec: 5 Burst Duration (min): 1 Processes: 1 Phone Home: on Product Mode: Precision Load Balancer Any ideas or suggestions on what we can do to ensure that our Linerate instance can be activated? Is this activation issue related to the connectivity problems on our em1 interface? Thanks.398Views0likes5CommentsDisk partition _root_ has only 0% free
hi , im getting this error massage it says " diskmonitor: 011d0004: Disk partition root has only 0% free" df -PhT |column -t Filesystem Type Size Used Avail Use% Mounted on /dev/mapper/vg--db--sda-set.3.root ext3 380M 380M 0 100% / have been digging on file system , incluing user home dir, but can't file any file that consume disk space any advise what directory should i checked? below output of du -h / 26K /root 9.7M /lib64 2.0K /srv 31M /sbin 1.5M /.config.tmp 82M /etc 4.8G /var 52M /lib 4.0K /mnt 0 /selinux 8.1G /shared 0 /sys 2.0K /media 1.2M /command 13K /lost+found 223K /tmp 2.0M /hotfix 4.5M /bin 1.8G /usr 2.0K /opt 15M /config 43G /dev 324K /home 57G / thx603Views0likes6CommentsUsing LineRate for Oracle Enterprise Manager 13c
Hi All, I am trying to use LineRate as load Balancer for Oracle EM 13c in my VM environment. I am having difficulties in setting it up, could anybody review my configurations and advise? Here is the link to configuration I am using: [Configuration Doc for EM13c ](https://drive.google.com/open?id=0BwU4-34txoardTZXdGp4d2FlZnc) References: [Em13c Doc] (https://docs.oracle.com/cd/E63000_01/EMADV/ha_setup.htmEMADV11590) [F5 Guide for EM12c](https://www.f5.com/pdf/deployment-guides/oracle-enterprise-manager-12c-dg.pdf) [Oracle Guide for EM12c] (http://www.oracle.com/technetwork/oem/framework-infra/wp-em12c-config-oms-ha-bigip-1552459.pdf)790Views0likes9CommentsLicense retrieval for Line rate starter edition not possible.
Hi, I am desperately trying to activate a starter edition of line rate. I followed the steps on https://docs.lineratesystems.com/093Release_2.5/100Getting_Started_Guide/130Configuring_Licensing and get stuck at the point where the actual license should be tranferred. My Linerate system has a working IP configuration: interface em0 mtu 1500 ip address dhcp ip address 10.160.6.110 255.255.255.248 ! ip route 0.0.0.0/0 10.160.6.105 it can access activate.f5.com, asb.f5.com and login.f5.com without problems: UNLICENSED:lr1.l4c bash "curl -v https://asb.f5.com/ 2>&1 | egrep '^(<|>)'; curl -v https://activate.f5.com/ 2>&1 | egrep '^(<|>)'; curl -v https://login.f5.com/ 2>&1 | egrep '^(<|>)'" > GET / HTTP/1.1 > User-Agent: curl/7.38.0 > Host: asb.f5.com > Accept: */* > < HTTP/1.0 302 Found < Location: https://login.f5.com/resource/login.jsp?ctx=719748 < Set-Cookie: requestedLocation=FOOBAR; path=/; domain=.f5.com < Server: BigIP < Connection: Keep-Alive < Content-Length: 0 < > GET / HTTP/1.1 > User-Agent: curl/7.38.0 > Host: activate.f5.com > Accept: */* > < HTTP/1.1 301 Moved Permanently < Date: Mon, 18 May 2015 11:25:18 GMT < Location: https://activate.f5.com/license/index.jsp < Content-Length: 249 < Content-Type: text/html; charset=iso-8859-1 < Set-Cookie: BIGipServerActivate=FOOBAR < Set-Cookie: TS01e1b080=FOOBAR; Path=/ < Server: F5 < 301 Moved Permanently Moved Permanently The document has moved here. > GET / HTTP/1.1 > User-Agent: curl/7.38.0 > Host: login.f5.com > Accept: */* > < HTTP/1.0 302 Found < Server: BigIP < Connection: Close < Content-Length: 0 < Location: /my.policy < Set-Cookie: LastMRH_Session=FOOBAR;path=/;secure < Set-Cookie: MRHSession=FOOBAR;path=/;secure < Set-Cookie: MRHSHint=FOOBAR; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ < Activation is not possible. Neither automatic: UNLICENSED:lr1.l4c bash "sudo tail -f /var/log/controller.messages" May 18 05:03:52 LROS LROS: Installed license is invalid: Free Tier Only. --- trying fallback. May 18 05:03:52 LROS LROS: INFO: base license is now inactive May 18 05:03:59 LROS LROS: ERROR: Failed to obtain a license: nor manual. In the latter case I get the error message on activat.f5.com after pasting in the dossier: Licensing Error: Legal Agreement checksum failed. You must accept the Agreement unaltered. But I did not change the EULA at all. Any clues? Cheers Christian458Views0likes7CommentsLinerate : HTTP API request.headers User-Agent property
Hello, I am trying to parse HTTP client request header and match 'User-Agent', 'Host' etc. I can not access User-Agent while I can access Host and Accept header. Pls see below. // Play with request headers var myheaders = servReq.headers; console.log('This request has those headers'); console.log(myheaders); // Access each properties console.log(myheaders.UserAgent); // This results undefined console.log(myheaders.User_Agent); // This results undefined console.log(myheaders.Useragent); // This results undefined console.log(myheaders.useragent); // This results undefined console.log(myheaders.Accept); // This works console.log(myheaders.Host); // This works tail -f /var/log/controller-messages May 26 09:41:17 LROS: This request has those headers May 26 09:41:17 LROS: { 'User-Agent': 'curl/7.26.0', May 26 09:41:17 LROS: Accept: '/', May 26 09:41:17 LROS: Host: '172.16.0.1' } May 26 09:41:17 LROS: undefined May 26 09:41:17 LROS:last message repeated 3 times May 26 09:41:17 LROS: / May 26 09:41:17 LROS: 172.16.0.1 How can I access User-Agent to match ? What I noticed with the console.log is that the property name appears with '' only for User-Agent. Accept and Host do not have ''. The LROS version is 2.3.1 as below. myLinerate show version F5 Networks LROS Version 2.3.1 Copyright (c) 2009-2014 F5 Networks, Inc. RELEASE IMAGE (7fa1f91/4879ceb/b35a310) Built Mon May 05 15:25:08 MDT 2014 by builder@bahamas:/build/bahamas/jenkins/workspace/2.3.1/lrs_release Node API compatibility version: 0.8.3 LineRate Scripting engine version: 0.2.0 myLinerate uptime is 4 days, 3 hours, 49 minutes BR Kimihito.462Views0likes2CommentsLinerate : HTTP response modification
Hello, I am trying to catch cliResp to replace its 'Server' header with proxyhost. And bind it to servResp to send it to a client. My script below does not work. I get fpm.on listener is triggered. But when it receives response, I do not see fp.on is kicked in, so no header modification is done. What is wrong with it ? "use strict"; var fpm = require('lrs/forwardProxyModule'); var os = require('os'); var proxyhost = os.hostname(); fpm.on('exist', 'myForwardProxy', function (fp) { console.log('fpm.on'); fp.on('response', function onResp(servResp, cliResp, next) { cliResp.bindHeaders(servResp); cliResp.setHeader("Server", proxyhost); cliResp.pipe(servResp); console.log('response modified'); next(); }); }); Thanks, Kimihito.307Views0likes1Comment