Apm seems to strip url query
Hello I having a issue with a external weblink in a application that i access over a webportal. The problem is that the link has a authentication query in it (yeah really bad i know), and when i click on the link i land on the page but the F5 seems to have striped to query part of the link. So its like this: [https://www.webshopexample.com/cgi-bin/hej/webshop_login.cgi?USERNAME=apa&PASSWORD=sheep](https://www.webshop.com/cgi-bin/hej/webshop_login.cgi?USERNAME=apa&PASSWORD=sheep) Gets [https://www.webshopexample.com/cgi-bin/hej/webshop_login.cgi](https://www.webshop.com/cgi-bin/hej/webshop_login.cgi) Any idea?
BIG-IP : iRule case-insensitive query-param matching
F5 BIG-IP Virtual Edition v11.4.1 (Build 635.0) LTM on ESXi In my iRule I wish to identify the value of a query-param that may or may not be present. I'm using this logic : set myparam 0 set myparam [URI::query [HTTP::uri] myparam] However, I'm finding that URI::query performs case-sensitive matching. For example, if my request is : http://www.mysite.com/hello?myParam=1 then the myparam variable will not be set. Howe can I perform case-insensitive matches of query-params ?How can I remove a query parameter from a URL?
I'm trying to remove a query parameter from a URL, and I'm stuck... Basically, I may have 0-n parameters appended to a querystring. They will all have a similar name, starting with "Context_", e.g. "Context_Site", "Context_Device_Type", "Context_Platform". My original plan was to remove the parameters using the following code (which I got from another question on this forum that I can no longer find.: when HTTP_REQUEST { if {[HTTP::query] contains "Context_"} { set newq "" Split query string into separate parameters foreach param [split HTTP::query] "&"] { Only add non-context query parms into newq if {!($param starts with "Context_")} { if {$newq eq ""} { append newq "?$param" } else { append newq "&$param" } } Add new query portion to path if {$newq ne ""} { HTTP::uri "[HTTP::path]$newq" } else { HTTP::uri [HTTP::path] } } } } The thing is, when I try to run this in Tcl for Windows (Tcl 8.5.8, Tk 8.5.8), I get an "invalid bareword" error for the "contains" in the second line: invalid bareword "contains" in expression "[HTTP::query] _@_contains "Context_..."; should be "$contains" or "{contains}" or "contains(...)" or ... I think the syntax is correct, so is this due to a problem with the version of Tcl I'm using? Also, on a related note (and I can ask this as a separate question if it makes sense), if I know that the Context_ parameter(s) will be the last parameter(s) in the URL, is there a better/faster way to remove them than to parse out the querystring into its individual parameters and check each one in turn? For instance, could I just search for the first instance of "&Context_"in HTTP::query and just strip out everything from that point on (also checking for HTTP:query starts with "Context_", I guess).
F5 ASM Template import query
I want to create new asm policy that will be used as a template for ASM security policy , i exported the new created asm policy with xml and binary format as a template and try to import both on another asm box it worked , However want to understand whats a difference between if we export and import policy template as a xml and binary , will both work in same way want to know the difference between xml without compact and binary in exporting and binary ? whats a F5 recommendation to export and import in binary or xml without compact ? request you to chekc and help me in answering this query
Configuring LDAP Auth and Query APM
Hi All/DC Experts, I am confused what I need to enter on this type of authentication. Actually I already managed to import groups into f5. The problem is I can't authenticate. Any suggestion/comments are really appreciated. Thanks. -Nat
Query / Monitor last failover time
Hello, I have a pair of LTMs that were toggling active-standby-active. We've resolved the issue, but I'd like to detect this in the future. Is there any way to programmaitcally (i.e. something that I can script) check the time of the last failover event, or how many failover events have happened (i.e. cache a counter, and see if it increases)? So far the only thing I've been able to come up with is looking in /var/log/ltm, which is a pretty expensive operation given that we have a LOT of iRule logging going there. Thanks, Jason
