Forum Discussion
nitass
Feb 12, 2012Employee
pool command just sends traffic right away regardless of monitor status.
[root@ve1023:Active] config b virtual bar list
virtual bar {
snatpool mysnatpool
destination 172.28.19.79:80
ip protocol 6
rules myrule
}
[root@ve1023:Active] config b pool foo list
pool foo {
members {
200.200.200.101:80 {
monitor fake
}
200.200.200.102:80 {}
}
}
[root@ve1023:Active] config b pool foo|grep -i pool\ member
+-> POOL MEMBER foo/200.200.200.101:80 inactive,down
+-> POOL MEMBER foo/200.200.200.102:80 active,unchecked
[root@ve1023:Active] config b rule myrule list
rule myrule {
when CLIENT_ACCEPTED {
if {[IP::addr [IP::client_addr] equals 172.28.19.0/24]} {
pool foo member 200.200.200.101 80
} else {
pool foo member 200.200.200.102 80
}
}
}
[root@centos251 ~] curl -i http://172.28.19.79
HTTP/1.1 200 OK
Date: Sun, 12 Feb 2012 05:45:49 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Fri, 11 Nov 2011 14:48:14 GMT
ETag: "4183e4-3e-9c564780"
Accept-Ranges: bytes
Content-Length: 62
Content-Type: text/html; charset=UTF-8
...
This is 101 host.
...
[root@ve1023:Active] config tcpdump -nni 0.0 port 80 and not host 200.200.200.10
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on 0.0, link-type EN10MB (Ethernet), capture size 108 bytes
21:39:10.570016 IP 172.28.19.251.45053 > 172.28.19.79.80: S 1534292938:1534292938(0) win 5840
21:39:10.570054 IP 172.28.19.79.80 > 172.28.19.251.45053: S 1499369674:1499369674(0) ack 1534292939 win 4380
21:39:10.570944 IP 172.28.19.251.45053 > 172.28.19.79.80: . ack 1 win 46
21:39:10.571011 IP 200.200.200.79.45053 > 200.200.200.101.80: S 2199208058:2199208058(0) win 4380
21:39:10.571017 IP 172.28.19.251.45053 > 172.28.19.79.80: P 1:155(154) ack 1 win 46
21:39:10.573862 IP 200.200.200.101.80 > 200.200.200.79.45053: S 2748507079:2748507079(0) ack 2199208059 win 5792
21:39:10.573879 IP 200.200.200.79.45053 > 200.200.200.101.80: . ack 1 win 4380