Forum Discussion

SeguridadSLYT_3's avatar
SeguridadSLYT_3
Icon for Nimbostratus rankNimbostratus
Jun 04, 2018

Problems with a website behind the F5.

Hello all, We have some problems with a website behind the F5, when we try to download a pdf file, quite often it's fail. We try it disabling the ASM policy but it was the same result.Now we replaced the F5 with an HAPROXY and it works fine, but if we activate again the F5 it fail again.

 

Can you help us with the issue?

 

Thanks. Regards.

 

5 Replies

  • You would need some additional troubleshooting on exactly where the failure is occurring. If the ASM policy is triggering for a specific subdirectory of where your PDFs exist you may try to exempt that URI value within the ASM preferences.

     

    I have also had issues in the past with the HTTP Profile of the VIP impacting PDF Downloads for some reason. I worked around this by creating an irule, identifying the URI or subdirectory of the PDFS and pool and then disabling the HTTP Profile for this specifically and everything worked. This was a bug with the application and the application developers couldn't figure it out. I had to make the exemption on the F5.

     

  • Hello, thanks for the response, we disabled the policy of ASM, but still failing, could you please send to us the rule that you created, identifying the URI and it worked for you, so we can test it in our environment?

     

  • Can you provide details on what you mean by disabling the policy of the ASM?

     

    Have you created an irule for this VIP or are you utilizing the standard VIP configuration?

     

  • We mean to the fact that politics has not activate in the VS, as seen in the image. We have not created any irules.

     

     

  • Basic iRule to disable based on your "/uri" value -

    when HTTP_REQUEST {
        STREAM::disable
        switch -glob [string tolower [HTTP::uri]] {
               "/example/pdf*" {
                pool /WEBSERVER_POOL
                HTTP::disable
                }
            default {
                pool /WEBSERVER_POOL
            }
        }
    }