Forum Discussion

Dixit_18200's avatar
Dixit_18200
Icon for Nimbostratus rankNimbostratus
Feb 16, 2009

Will Irules Make the firewall to hung stage?

Hi Guys,

 

 

I just wanted to know if irules ever break the load balancer?

 

 

We found two irules applied on the VIP and were getting the following logs.

 

 

Feb 12 04:11:53 tmm tmm[1314]: 01220001:3: TCL error: Rule Vanity-Redirect - Operation not supported. Multiple redirect/respond invocations not allowed (line 8) invoked from within "HTTP::redirect "https://microsite.accenture.com/concadia" "

10 Replies

  • I guess there are multiple redirects/responds on your iRules. Basically, you cannot redirect when the request has been redirected. Feel free to post the two iRules.
  • Thanks for the reply. But my question is will that cause load balancer to hang?
  • I dont think it would cause load balancer to hang. If it does, I suggest to call F5 support to investigate further.
  • Thanks for the reply.

     

     

    Now i have one more requirement. I need an Irule where in it can redirect to two different pools based on the content.

     

     

    For example if the url contains x.x.x.x or y.y.y.y redirect it to a.a pool else to b.b pool. Can some one please help me with this?

     

  • when HTTP_REQUEST {

     

    if { [matchclass [HTTP::uri] starts_with $::a.a.a.a] }

     

    { pool X.x.x.x }

     

    else {

     

    pool y.y.y.y-443

     

    }

     

    }

     

     

     

    We have created a matchclass which contains the following things

     

     

    /cccc

     

    /bbbb

     

     

    Even thought we have created the matchclass the above i rule is not working. when we type

     

     

    https://www.xxx.com/cccc its not going to the pool what we have specified. Also please note this works perfectly when we type https://www.xxx.com/cccc/
  • The rule looks okay as you've listed it. What happens when a client makes a request? Can you add logging to the iRule to check what's happening? If you're not sure, can you reply with the VIP and class configuration (using 'b virtual VIP_NAME list', 'b class CLASS_NAME list' and 'b rule RULE_NAME list'?

     

     

    Thanks,

     

    Aaron

     

     

  • when a client makes a request it goes to the default pool. I will paste the vip configuration tomorrow. Thanks for the reply.
  • hi,

     

     

    Finally the problem got resolved. I got to know that datagrouplist does not support special characters. Hence it was passing the traffic to default pool. We removed the special character like - and it started working. Also please note that datagroup list are case sensitive. You should be very careful while entering the string.