Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

irule vs LTM policy

If I have an irule & an LTM policy configured on the same virtual server, which will be processed first Regards Nikhil

0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

AMG is mostly correct in that policies are evaluated before iRules, but a policy client accepted action will also happen before the similar iRule event. I wrote up an article on doing verification testing of stuff like this just now, and you can get the definitive details in the knowledge article K16590.

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

As per my understanding F5 validate the VIP setting as per defined configuration (Top to Bottom). In that iRule comes prior then policies. So, I will go with iRule first.

But both has unique feature...

  • Local Traffic Policies are faster if performance is an issue
  • iRules are more flexible and you can get help from DC people
0
Comments on this Answer
Comment made 23-Jul-2018 by Jhaunu Gupta 261

As per our setup LTM policy is getting executed first than irule getting executed

0
Comment made 23-Jul-2018 by Samir Jha 2923

In your setup could be traffic match per policy condition.

For support events such as HTTP_REQUEST & HTTP_RESPONSE; LTM policy evaluation occour before iRule. This means that's possible to write iRule to override an LTM policy decisions.

Cheers...

0
Comment made 23-Jul-2018 by nikhil raj 63

Thank you all for the replies

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Policies and profiles always execute before iRules for the same network layer.

For example we have policy to ensure iRules events are enabled as we have several iRules that do an event disable all during select errors, to ensure we re-enable all the iRule event for the next HTTP request (multiplexed clientside connections) we use policies to run the TCL commend to event enable all. We can only do this as the Policies execute before our iRules.

However, your CLIENT_ACCEPTED iRule event will execute before your HTTP profile or any Policy looking at the HTTP request as this is simply the order of events based on the F5 processing through the network layers.

0