Forum Discussion

jmwest1_142072's avatar
jmwest1_142072
Icon for Nimbostratus rankNimbostratus
Jan 24, 2014

Convert Citrix Netscaler rule to F5 Persistence Profile or iRule

Our agency has an industry specific application that uses an executable shell to launch IE and connect to a back end server for the http traffic. Our problem is that persistence isn't working correctly and users are being dropped out of the application and back to its login screen very regularly. The vendor has provide the rules that they use with Citrix Netscaler as an example as they are not familiar with F5 appliances. Can anyone help with converting these 2 rules to use on the F5?

 

Rule: HTTP.REQ.COOKIE.REGEX_SELECT(re/GreenwaySession=[a-zA-Z0-9]*/).TYPECAST_COOKIE_T.VALUE(0)

 

Response Rule: http.RES.SET_COOKIE.REGEX_SELECT(re/GreenwaySession=[a-zA-Z0-9]*/).TYPECAST_COOKIE_T.VALUE(0)

 

Thanks in advance.

 

cookie persistence
design

3 Replies

Sort By
  • IheartF5_45022's avatar
    IheartF5_45022
    Icon for Nacreous rankNacreous
    Jan 25, 2014

    I'm not sure I have the nuances of the Citrix rule down pat, but I suspect this is what you need with a Universal persistence profile (see http://support.f5.com/kb/en-us/solutions/public/7000/300/sol7392.html);-

    when HTTP_RESPONSE {
    if { [HTTP::cookie exists "GreenwaySession"] } {
        persist add uie [HTTP::cookie "GreenwaySession"]
    }
}
when HTTP_REQUEST {
    if { [HTTP::cookie exists "GreenwaySession"] } {
        persist uie [HTTP::cookie "GreenwaySession"]
    }
}
    • jmwest1_142072's avatar
      jmwest1_142072
      Icon for Nimbostratus rankNimbostratus
      Jan 28, 2014
      Thanks for the reply! I've applied a universal persistence profile with this rule in place and am testing. I'll follow up when testing is completed.
    • jmwest1_142072's avatar
      jmwest1_142072
      Icon for Nimbostratus rankNimbostratus
      Feb 05, 2014
      After extensive testing the universal persistence profile isn't working. It appears that it should, but testing revealed persistence was not a good as using a simple http cookie rule. At this point I think abandoning the F5 for load balancing for this application is the only option.