Post of the Week: Port Lockdown
Welcome to Post of the Week, where we take a question of general interest from Q&A and hit the lightboard with our take on the issue. In this episode, I walk through the specifics of the self-IP port lockdown feature on BIG-IP. Thanks to community member Kevin for asking the question, and our very own F5 training professionalCathy Rodriguez for providing the answer! Resources Solution K17333: Overview of port lockdown behaviorPost of the Week: BIG-IP Policy Sync
In this Lightboard Post of the Week, I light up the answer to a question about BIG-IP APM Policy Sync. Posted Question on DevCentral: https://devcentral.f5.com/s/questions/apm-policy-sync-56330 Thanks to DevCentral user Murali (@MuraliGopalaRao) for the question and special thanks to Leonardo Souza for the answer! ps Related: DevCentral’s Featured Member for May – NTT Security’s Leonardo Souza Manual Chapter:Synchronizing Access PoliciesPost of the Week: Replacing a String in the Request URI
In this week’s Post of Week, I address community member Shann_P’s question on how to make an iRule update a string at a specific location within the path of the URI: The iRule needs to be able to locate the 7th "chunk" of the URI, add a period (.) to the end of it and re-insert it back into the URI before passing it back to the pool. He mentioned regex as a possibility and I shuddered with a cold chill running up my spine! Regex, while totally capable, should be the absolute last resort in an iRule due to performance reasons. Tcl’s string commands are my go to tools in the iRules toolbox for situations like this, and this was a job for string map. The solution to Shann_P's question is covered in the video below, and also answered in the original question. But wait! This week you get a special BONUS Post of the Week, where I detail an unrelated example on multiple mapping patterns with the string map command. Resources Common iRules string commands(DevCentral article) Tcl string command documentation Getting Started with iRules (series) Intermediate iRules (series) Advanced iRules (series)Post of the Week: iControl REST Subcollections & ZoneRunner Options
In this episode of Post of the Week, Jason addresses a couple iControl REST issues that come up in Q&A often: confusion over how to handle objects that are not sub-collections, and options for working around the lack of F5 DNS cli for ZoneRunner. The procedures for safely updating the BIG-IP named files are covered in knowledge base article K7032 on AskF5.
