Issue with Caching Profile
Hi there, I'm trying to set-up a caching profile for one of our applications. The application uses the following URL formats: Main pages - /backoffice/ Resources - /backoffice-resources/ I've set-up the following Caching profile: ltm profile web-acceleration Caching_Product { app-service none cache-uri-exclude { /backoffice/* } cache-uri-include { .* } cache-uri-include-override none cache-uri-pinned { /backoffice-resources/* } defaults-from optimized-caching } However I'm not seeing any items appear in the Cache for this profile: show /ltm profile ramcache Caching_Product Ltm::Ramcaches /Common/Caching_Product Total records returned: 0 Any ideas how I can get the resources to cache??? Cheers Gavin
Web Accelerator and X-Forwarded-For
I have a new WA deployment. I am using a redundant pair of 6400 with the WA feature. I am running 9.4.5 HF2. This is my typical LTM configuration that I am using for a give site monitor site.com_monitor { defaults from http send "GET /bigip/bigip.html HTTP/1.1\nHost: site.com\nConnection: Close\n\n" } pool site.com_pool { lb method predictive action on svcdown reselect monitor all site.com_monitor members 10.1.1.1:http 10.1.1.2:http } profile httpclass site.com_httpclass { defaults from httpclass wa enable } virtual site.com { pool site.com_pool destination 10.2.1.1:http ip protocol tcp httpclass site.com_httpclass profiles oneconnect tcp-lan-optimized clientside tcp-wan-optimized serverside http-acceleration } and I use a modified version of the Level 2 policy for the site. What I am wanting to be sure is that my web access logs on my web servers have the correct client IP address for request, so I would like to insert the X-Forwarded-For header using the HTTP profile. I would prefer not to modify the http-acceleration profile but to create a new one that inherits from it. When I tried that, I noticed that my hits for Hot Cache went to 0. What would be the recommended way to get X-Forwarded-For header sent to the origin servers - modify http-acceleration profile, iRule, or something else? Thanks, Mark
monitoring disk via SNMP
I am trying to set up our NMS to montior the disk space on WA partitions via SNMP. I am using the UCD oid under: .1.3.6.1.4.1.2021.9.1 and I am only seeing the / and /var partitions. I see that in snmpd.conf only those 2 partitions are listed for monitoring, and I would like to monitor a couple additional partitions. I managed to decipher the help syntax enough to come up with this command: bigpipe snmpd disk percent minspace type percent minspace 10 path /var/log but if I run it again to add another partition: bigpipe snmpd disk percent minspace type percent minspace 10 path /shared it overwrites the previous. I can't figure out the syntax to add multiple... a little help?ESI processing on WA
In working on an issue I mentioned in a previous post, I realized that I might be able to accomplish the same thing using ESI variables. I am completely foreign to ESI and never messed with it before, so decided to start tinkering with it behind WA. Unfortunately, I am not able to make even the simplest example work. What am I missing? The docs seem pretty straight-forward: "If the response includes an ESI Surrogate-Control header, the WebAccelerator system performs ESI processing as part of the assembly and applies any associated lifetime rules and parameter substitutions configured for the node, and then sends the response to the client." CHECK, got that. I just have a simple one-line ESI page being served up from Apache: This is the req/resp direct from origin: GET http://mydomain.com/esi/esi_test1.html HTTP/1.1 Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/vnd.ms-excel, application/msword, application/xaml+xml, application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, application/x-silverlight, application/x-shockwave-flash, application/vnd.ms-powerpoint, */* Accept-Language: en-us User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6; robbrown; .NET CLR 1.1.4322; .NET CLR 2.0.50727; Windows-Media-Player/10.00.00.3990; .NET CLR 3.0.04506.30; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) Accept-Encoding: gzip, deflate Connection: Keep-Alive Host: mydomain.com HTTP/1.1 200 OK Date: Fri, 14 May 2010 01:48:44 GMT Server: Apache Surrogate-Control: max-age=120,content="ESI/1.0" Cache-Control: max-age=120 Content-Type: text/html; charset=utf-8 Content-Length: 39 Now, when I put WA in front of this and request the same page, it just spins, and I see this in the pvac.log: May 13 18:41:03 local/webacc00 debug WA Debug ( 3583): [ TmPlugin.cxx:1631 clientHandler ] No pool supplied If I request a NON-ESI page from that same dir, it works, so I know I have my application/pool mappings working correctly. Am I doing something wrong, or does this look like a support case? (this is on 10.1 BTW)not caching on stream_matched problem
I have an interesting problem I'm hoping can be solved with an iRule: I have a cgi that proxies to a back-end verity cluster to retreive search results. Occasionally, (because of a problem on the verity servers) I get a bogus reply with 0 results. This ends up getting cached on WA and served to subsequent requests for the same search. Here is an example of one of the bogus search results: { "gutter_url" : "", "sort_order" : "popularity", "sort_by" : "album", "num_results" : 0, "status" : "SUCCESS", "type" : "BROWSE", "elapsed" : 10.086959 } I'd like to have rule that follows this basic logic: 1. Identify search request by uri starts_with "/search-cgi" 2. Look for above string '"num_results" : 0,' in response to above request. 3. Tell WA to not cache this response. I have the basic shell of the iRule as follows, but it's not working: The WAM is still caching the response and serving the next request with X-Pvinfo code S10102. Another thing I cannot figure out how to do is send a no-cache header on the response so the client browser does not cache it locally. I'd appreciate any help with this. when HTTP_REQUEST { set searchreq 0 if { [HTTP::uri] starts_with "/search-cgi" } { set searchreq 1 log local0. "SEARCH REQUEST: [HTTP::uri]" } } when HTTP_RESPONSE { STREAM::disable if {$searchreq == 1} { STREAM::expression {@"num_results" : 0,@} STREAM::enable } } when STREAM_MATCHED { set badreq 1 log local0. "BAD SEARCH RESULT: [STREAM::match]" not working for WAM: CACHE::disable }
Apache Virtual Hosts
I'm load balancing 2 apache servers, each have the same named base virtual hosts defined. If I go behind the BIGIP the virtual hosts work fine. When I try to access them through the BIGIP I get the following error: "Access Denied by intermediary. Domain not recognized." I'm not using ssl (at least not yet). Any ideas?
Problems using ASM and Web Accelerator/AAM
Hello everyone, I am having problems to get the ASM module to work with the Web Accelarator / AAM. The article https://support.f5.com/csp/article/K14880 describes some conditions for both modules to work together. As described in the document, in my setup if bigip receives a valid request and does not generate a violation the cache works. However, if an invalid request is received and generates a violation, all other valid requests for the same URL are no longer cached. This happens regardless the request origin. For example, consider requests for . All valid requests for "/index.html" are cached. However, at the moment a request for "/index.html" generates a violation, any other valid request for "/index.html" are no longer cached. That seems odd to me. Is this an expected behavior? Or am I missing something? Obs: I'm using Bigip VE 12.1.2 To run the tests, I created an empty ASM policy and activated the signature attack: Automated client access curl. This policy prevents users from using command line "curl" to access the home page. So, I did: From machine 1, I access the URL from a valid browser. I verified that the request was cached. From machine 2, I access the URL using the "curl". I verified that the request was NOT cached and the ASM reported a violation. From machine 1, I access the URL from a valid browser. I verified that request was NOT cached and the ASM did not raise any violation for this request.AAM: how to cache home page? (when path = /)
I'm trying to figure out how to cache pages if the request doesn't contain a file name (e.g. http://www.domain.com/)..) I assumed that the MIME-type of the Object Type (under Policies) would classify HTML-pages as such, but it looks like this doesn't cover requests without a matching file extension. What am I missing?Access Denied - Credentials Missing when browsing SharePoint 2010
I have recently deployed an http profile to enable web acceleration though when ever I attempt to access the page, I receive an error that credentials are missing. I have a standard profile using TCP Lan optimization default settings, default http profile, SharePoint 2010 WA policy and cookie persistence. Lastly, when using performance layer 4 Virtual Server, I am able to browse the SharePoint page as expected. Thoughts?