Mike_Maher
Jun 16, 2010Nimbostratus
Trying to throttle logging
I am running the following iRule on some of my Virtuals, I had an issues where we tripped the first logging entry (log local0. "WARNING:
Local server [LB::server addr] on
port [LB::server port] just refused a connection") in the rule due to a particular server only being setup with ICMP monitoring where it logged 76000 entries in less than a minute causing a failover on my LTM. I have fixed the monitoring but I have been tasked to make sure that this cannot happen again. So what I would like to do is setup logging that so it will only log 100 entries then stop and wait for time period before logging another 100 entries. Does anyone have an example of how to do this? Thanks
when LB_FAILED {
if { [active_members [LB::server pool]] > 0 } {
log local0. "WARNING: Local server [LB::server addr] on
port [LB::server port] just refused a connection"
LB::reselect
} else {
log local0. "Connection request made to local servers,
sending to remote data center because LB_FAILED"
node 1.2.3.4 80
Apply this snat to make the return traffic come back
through this LTM
snat 4.3.2.1
tell the LTM to backup and retry this connection to the
hard coded address and port
LB::reselect
}
}