Routing traffic by URI to a server pool with https front end using iRule

Question

I am wanting&nbsp;to take any https request to&nbsp;commonserver.domain.name&nbsp;and routing traffic by URI to a specific port on an underlying pool member.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;https is is handled by the f5 (in a SSL Profile) and the connections are persistent once established.&nbsp;The port is based of the uri coming in.&nbsp;&nbsp;https://commonserver.domain.name/app1&nbsp;&nbsp;&nbsp;&nbsp;-&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://&lt;serverpool&gt;.domain.name:xxx2/app1&nbsp;&nbsp;&nbsp;https://commonserver.domain.name/app2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://&lt;serverpool&gt;.domain.name:xxx4/app2&nbsp;&nbsp;&nbsp;https://commonserver.domain.name/app3&nbsp;&nbsp;&nbsp;&nbsp;-&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://&lt;serverpool2&gt;.domain.name:xx82/app3&nbsp;&nbsp;https://commonserver.domain.name/ -&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://&lt;serverpool3&gt;.domain.name/defaultpage.htm&nbsp;&nbsp;

yoann_le_corvi1 · Answer

Hi&nbsp;To make things simpler, can't you create one one pool for port xxx2, another for port xxx4 another for port xx82, and a last one for port 80, and assign pool directly according the URI using LTM policy ?&nbsp;Yoann

rossvermette · Answer

You could try an iRule with a Datagroup to match on a " HTTP host Header + Path" and map it to select a pool.Note: I haven't tested this,when CLIENT_ACCEPTED {
    set DEFAULT_POOL [LB::server pool]
}
&nbsp;
when HTTP_REQUEST {
    set HOST_PATH_2_POOL [string tolower [getfield [HTTP::host] ]][string tolower [URI::path [HTTP::uri] 1 1]]
    set POOL_SELECT_VALUE [class lookup $HOST_PATH_2_POOL HOST_and_PATH_2_POOL_DG]
    if {$POOL_SELECT_VALUE eq ""} {
       set POOL_SELECT_VALUE [class lookup [string tolower [getfield [HTTP::host] "." 1]] HOST_and_PATH_2_POOL_DG]
    }
    #log local0.notice "HOST_PATH_2_POOL = $HOST_PATH_2_POOL"
    #log local0.notice "POOL_SELECT_VALUE = $POOL_SELECT_VALUE"
    if {$POOL_SELECT_VALUE eq ""} {
        set USE_POOL $DEFAULT_POOL
    } else {
        set USE_POOL $POOL_SELECT_VALUE
    }
}Your DG would look like:"commonserver.domain.name/app1" := "Poolname_1","commonserver.domain.name/app2" := "Poolname_2","commonserver.domain.name/app3" := "Poolname_3,"commonserver.domain.name/" := "Default_poolname",

charles_owen · Answer

I will try your suggestion tomorrow...With limited success, I had started down a a path using a similar code with a DG using only "/appname" and used a  "hammer" approach with a first irule before it like this:&nbsp;Irule #1when HTTP_REQUEST {&nbsp;if { [HTTP::uri] eq "" || [HTTP::uri] eq "/" } {&nbsp;&nbsp;HTTP::redirect "http://commonserver.domain.name/"&nbsp;"&nbsp;&nbsp;event disable all&nbsp;}}&nbsp;Irule#2when HTTP_REQUEST {&nbsp;&nbsp;#Check to see if the DataGroup matches a URI call&nbsp;&nbsp;set svr_port [class match -value -- [HTTP::uri] starts_with port_fwd_applications]&nbsp;&nbsp;#Check to see if a LB decision has already been made for this connection&nbsp;&nbsp;if { [LB::server addr] != "" }{&nbsp;&nbsp;#Check to see the LB port matches the DataGroup entry&nbsp;&nbsp;&nbsp;&nbsp;if {[LB::server port] != $svr_port } {&nbsp;&nbsp;&nbsp;&nbsp;#If the port and DataGroup dont match, remove the serverside connection and re-load-balance	 	LB::detach&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;	&nbsp;&nbsp;}	&nbsp;&nbsp;if {$svr_port eq ""}{	&nbsp;&nbsp;#DataGroup doesn't match the URI, drop the connection	&nbsp;&nbsp;#or do something else here	&nbsp;&nbsp;drop	&nbsp;&nbsp;}}&nbsp;when LB_SELECTED {&nbsp;&nbsp;#A new LB decision has been made, check to see if the DataGroup has fired&nbsp;&nbsp;if {$svr_port != ""}{&nbsp;&nbsp;&nbsp;&nbsp;#The DataGroup URI matches, check to see if the ports match&nbsp;&nbsp;&nbsp;&nbsp;if {[LB::server port] != $svr_port } {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#Send the traffic to the DataGroup Port&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;LB::reselect node [LB::server addr] $svr_port&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;&nbsp;&nbsp;&nbsp;}}

Forum Discussion

Routing traffic by URI to a server pool with https front end using iRule

3 Replies

Recent Discussions

F5 loadbalancer not working

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Pricing when used with aws waf

F5 terminal - help to run commands - disk space full

import live updates from version x to version y

Related Content

Route traffic to specific sorry server path

Getting TCP Reset-0 from server when routing HTTPS traffic via F5

Routing traffic by URI using iRule

LTM policy to route traffic to different pools

fellow traffic