picking a pool member with source_addr persistence

Question

Working on the following irule, no luck so far
&nbsp;the requirement is that when http request comes in, if the request is made by any poop member, connection should go back to the requsting member, there are two members in the pool.&nbsp;
&nbsp;If http request comes from user, use source_addr persistence.&nbsp;
&nbsp;I'm seeing request from poop memebrs not going to itself but also in /var/log/ltm, I do see the irule being hit.&nbsp;
&nbsp;Please help.&nbsp;
&nbsp;when HTTP_REQUEST {
&nbsp;  if { [IP::addr [IP::client_addr] equals 172.19.10.70] } {
&nbsp;     pool LMS-lms.lnh.bislab.pwj.com.80 member 172.19.10.70
&nbsp;     log "hit member 172.19.10.70"
&nbsp; } elseif { [IP::addr [IP::client_addr] equals 162.66.195.95] } {
&nbsp;     pool LMS-lms.lnh.bislab.pwj.com.80 member 162.66.195.95
&nbsp;     log "hit member 162.66.195.95"
&nbsp; } else {
&nbsp;     pool LMS-lms.lnh.bislab.pwj.com.80
&nbsp;     persist source_addr 10800
&nbsp;     log "hit pool"
&nbsp; }
&nbsp;}

jrahm · Answer

I'm confused...the server's in the pool need to request something of themselves?  Perhaps a greater picture of what you are trying to accomplish would be helpful.

sheila_liu_8576 · Answer

unfortunately, yes. The servers are calling themselves. &nbsp;
&nbsp;This is due to a limitation in an application called saba. Saba referes to the URL even when the request is coming from the server itself. The idea in Saba was that the server can call contents anywhere using a URL, not limited to its own contents.

sheila_liu_8576 · Answer

yes, we are using snat

jrahm · Answer

You could try this:
when CLIENT_ACCEPTED {
  if { [IP::addr [IP::client_addr] equals 172.19.10.70] } {
    use snat snat_a_IP
  } elseif { [IP::addr [IP::client_addr] equals 162.66.195.95] } {
      use snat snat_b_IP
  }
}
when HTTP_REQUEST {
  if { [IP::addr [IP::client_addr] equals snat_a_IP] } {
    pool LMS-lms.lnh.bislab.pwj.com.80 member 172.19.10.70
    log "hit member 172.19.10.70"
  } elseif { [IP::addr [IP::client_addr] equals snat_b_IP] } {
      pool LMS-lms.lnh.bislab.pwj.com.80 member 162.66.195.95
      log "hit member 162.66.195.95"
  } else {
      pool LMS-lms.lnh.bislab.pwj.com.80
      persist source_addr 10800
      log "hit pool"
  }
}
This, of course, is assuming the client IP is snatted before the HTTP_REQUEST event occurs. Not tested!

sheila_liu_8576 · Answer

looks like I hit a bug. If I create a pool with only the server in it, then I refer to this pool instead of a pool member, it works.&nbsp;
&nbsp;anyone had seen this behavior before?

Forum Discussion

picking a pool member with source_addr persistence

8 Replies

Recent Discussions

Open Redirection Mitigation

F5Access | MacOS Sonoma

enable tls1.2 on management interface on F5 ltm running version 10.x

[ASM] - what is "Browser Challenge file" ?

SMS server with BIGIP

Related Content

Source_Addr Persistence Problems

iRule: persistence after first rule pick

Decoding the IPv4 address from the persistence cookie

Setting up persistence in F5 XC

Weblogic JSessionID Persistence