Forum Discussion

zafer's avatar
zafer
Icon for Nimbostratus rankNimbostratus
Dec 26, 2008

irule for different services same domain name on GTM

Hi,

 

 

i have two vip on LTM part

 

site1

 

1.1.1.1:80 and 1.1.1.1:443

 

site2

 

2.2.2.2:80 and 2.2.2.2:443

 

 

GTM part;

 

pool1 1.1.1.1:80 and 2.2.2.2:80

 

pool2 1.1.1.1:443 and 2.2.2.2:443

 

 

 

wide ip domain is test.zafer.com and points to pool1

 

but how can i send traffic to the https request to pool2

 

 

regards

 

 

zafer

 

 

 

3 Replies

  • zafer's avatar
    zafer
    Icon for Nimbostratus rankNimbostratus
    i created two GTM pool on my lab

     

    pool1 for http vip

     

    pool2 for https vip

     

     

    and i tested this irule and assigned to wideip (for http vip), it worked

     

     

    when DNS_REQUEST {

     

    if { [TCP::server_port] equals 443 } {

     

    pool pool2

     

    }

     

    }

     

     

    is that correct or any suggestions?

     

     

    regards

     

     

    zafer

     

  • If site one is both vips, you don't want them identified by GTM as different resources, do you? GTM only hands out an address, not an address:port combination, so you can only affect one decision. My suggestion would be that if SSL is a required piece of your application to consider it "UP", then only add those virtuals, but tie the monitoring of the LTM 443 virtual to also monitor port 80 on the same resource so the 443 virtual will only report healthy if both ports are up.
  • zafer's avatar
    zafer
    Icon for Nimbostratus rankNimbostratus
    im not sure but i created configuration like this

     

     

    i have 2 vips on ltm http and https vip

     

    2 pool on gtm gtm_http_pool (http vips) and gtm_https_pool (https vips)

     

    i created wide ip www.site.com and assigned gtm_http_pool and gtm_https_pool in this domain.

     

     

    when i tested like this enable disable vips on ltm and gtm monitor and works properly

     

     

    what do you think about this configuration

     

     

    zafer