Forum Discussion

Shahrzad_84598's avatar
Shahrzad_84598
Icon for Nimbostratus rankNimbostratus
Nov 01, 2015

Using an iRule to specify multiple allowed ports for a virtual server

Hi there!   I use version 11.4.0 LTM. One of the key concerns for doing the mentioned job in my subject is when our ports in irule are not the same as pool members ports we should specify "all Por...
application delivery
design
devops
iRules
LTM
VernonWells's avatar
VernonWells
Icon for Employee rankEmployee
Nov 01, 2015

I apologize; I'm not sure I follow your concern.

In general, the best approach to this is to create two separate Virtual Servers: one listening on 443 (with POOL1 assigned) and the other listening on 5443 (with POOL2 assigned). A BIG-IP takes a default deny posture (unless you are using AFM and override this), so your default condition above (

discard
) is implied. The two VS method is faster and generally, safer (since a logic bug in the iRule could cause unexpected results).