How to remove session persistency from an IRule
Here is scrubbed F5 rules.
We have two pools for destination xxx.xx.xx.yyy:443:
oam_server_80 and oaam_server_80.
By default, all traffic, ie. /oam goes to the pool oam_server_80 and only /oaam_server goes to the pool oaam_server_80.
What we observe using the same browser client with two transactions. 1. start with uri /oam 2. start with uri /oaam _server It works as designed.
What we observe using the same browser client with two transactions.1. start with uri /oaam_server2. starts with uri /oamFor the 2nd request, /oam always go to pool /oaaM_server.80.
Any suggestion
ltm virtual /Common/sso.fake.xyz_ssl { destination /Common/xxx.xx.xx.yyy:443 ip-protocol tcp mask 255.255.255.255 pool /Common/oam_server_80 profiles { /Common/http { } /Common/sso.fake.xyz_ssl { context clientside } /Common/tcp { } } rules { /Common/oaam_server } snatpool /Common/FakeCompany_Web_SNAT vlans { /Common/LB_FW_VLAN_3227 } vlans-enabled }
ltm pool /Common/oam_server_80 { members { /Common/111.22.3346:80 { address 111.22.3346 } /Common/111.22.3348:80 { address 111.22.3348 } } monitor /Common/tcp }
ltm profile client-ssl /Common/sso.fake.xyz_ssl { alert-timeout 60 allow-non-ssl disabled app-service none cache-size 262144 cache-timeout 3600 cert /Common/199104280-sso.fake.xyz.crt chain none ciphers DEFAULT defaults-from /Common/clientssl handshake-timeout 60 key /Common/199104280-sso.fake.xyz.key mod-ssl-methods disabled options { dont-insert-empty-fragments } proxy-ssl disabled renegotiate-max-record-delay 10 renegotiate-period indefinite renegotiate-size indefinite renegotiation enabled secure-renegotiation require server-name none sni-default false sni-require false strict-resume disabled unclean-shutdown enabled }
ltm rule /Common/oaam_server { oaam_server
Creation Date:12/03/2015 D. URL sso.fake.xyz/oaam_server redirects to pool oaam_server_80
when HTTP_REQUEST { if { [HTTP::uri] starts_with "/oaam_server" } {pool oaam_server_80 }} }
ltm pool /Common/oaam_server_80 { members { /Common/111.22.3350:80 { address 111.22.3350 } /Common/111.22.3351:80 { address 111.22.3351 } } monitor /Common/http