Forum Discussion

Sully_103006's avatar
Sully_103006
Historic F5 Account
Apr 08, 2011

Is there anyway to make this Siebel iRule more efficient?

when CLIENT_ACCEPTED {

 

TCP::collect 1 }

 

when CLIENT_DATA {

 

if { [findstr [TCP::payload] "/siebel" 0 " "] == "/siebel/finsobjmgr_enu" } {

 

log local0. "Using pool company.org_2321_pool"

 

pool company.org_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] == "/siebel/smobjmgr_enu" } {

 

log local0. "Using pool company.org_2321_pool"

 

pool company.org_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] == "/siebel/eaiobjmgr_enu" } {

 

log local0. "Using pool company.org_2321_pool"

 

pool company.org_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] == "/siebel/finsobjmgr_enu/rr" } {

 

log local0. "Using pool company.org_2321_pool"

 

pool company.org_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] == "/siebel/smobjmgr_enu/rr" } {

 

log local0. "Using pool company.org_2321_pool"

 

pool company.org_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] == "/siebel/eaiobjmgr_enu/rr" } {

 

log local0. "Using pool company.org_2321_pool"

 

pool company.org_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] contains "/!5." } {

 

log local0. "Using pool APP01_2321_pool"

 

pool APP01_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] contains "/!7." } {

 

log local0. "Using pool APP02_2321_pooll"

 

pool APP02_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] contains "/!9." } {

 

log local0. "Using pool APP03_2321_pool"

 

pool APP03_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] contains "/!b." } {

 

log local0. "Using pool APP04_2321_pool"

 

pool APP04_2321_pool

 

}

 

elseif { [findstr [TCP::payload] "/siebel" 0 " "] contains "/!d." } {

 

log local0. "Using pool APP05_2321_pool"

 

pool APP05_2321_pool

 

}

 

else {

 

log local0. "Rejected request for [findstr [TCP::payload] "/siebel" 0 " "]"

 

discard }

 

}

 

 

 

application delivery
dev
devops
iRules

19 Replies

Sort By
  • Joel_Moses's avatar
    Joel_Moses
    Icon for Nimbostratus rankNimbostratus
    Apr 08, 2011
    Not sure if the APP pool matching is good enough with "glob" matching (you may need "regexp" matching depending on whether the string does or does not start with the data), but this might work: 

    when CLIENT_ACCEPTED {
      TCP::collect 1 
}

when CLIENT_DATA {
  switch -glob [findstr [TCP::payload] "/siebel" 0 " "] {
"/siebel/finsobjmgr_enu" -
"/siebel/smobjmgr_enu" -
"/siebel/eaiobjmgr_enu" -
"/siebel/finsobjmgr_enu/rr" -
"/siebel/smobjmgr_enu/rr" -
"/siebel/eaiobjmgr_enu/rr" {
pool company.org_2321_pool
}
"/!5.*" {
pool APP01_2321_pool
}
"/!7.*" {
pool APP02_2321_pool
}
"/!9.*" {
pool APP03_2321_pool
}
"/!b.*" {
pool APP04_2321_pool
}
"/!d.*" {
pool APP05_2321_pool
}
default {
log local0. "Rejected request for [findstr [TCP::payload] "/siebel" 0 " "]"
discard
}
  }
}
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Apr 08, 2011
    As a side benefit, switch -glob is many times faster than if/else chains. So cleaner, more functional, AND faster. It's a trifecta. ;)

     

     

    Good work Joel.

     

     

    Colin
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Apr 08, 2011
    Oof, just re-read the original iRule. switch is going to be many, many orders of magnitude faster for the deeper matches because in the original example you were running the findstr with contains on every single if. This should be a massive performance improvement.

     

     

    Colin
  • Sully_103006's avatar
    Sully_103006
    Historic F5 Account
    Apr 08, 2011
    Rock on! This is what I'm talkin about. Many thanks to all.

     

     

    Sully
  • Sully_103006's avatar
    Sully_103006
    Historic F5 Account
    Apr 11, 2011
    Hmmm...it looks like switch -glob kinda works tho when using this iRule I never get traffic to the APP01-APP05 pools. I think the " * " in "/!5.*" maybe causing the mismatch. The original iRule used "/!5." and matched well.

     

     

    when CLIENT_DATA {

     

    switch -glob [findstr [TCP::payload] "/siebel" 0 " "] {

     

    "/siebel/finsobjmgr_enu" -

     

    "/siebel/smobjmgr_enu" -

     

    "/siebel/eaiobjmgr_enu" -

     

    "/siebel/finsobjmgr_enu/rr" -

     

    "/siebel/smobjmgr_enu/rr" -

     

    "/siebel/eaiobjmgr_enu/rr" {

     

    pool company.org_2321_pool

     

    }

     

    "/!5.*" {

     

    pool APP01_2321_pool

     

    }

     

    "/!7.*" {

     

    pool APP02_2321_pool

     

    }

     

    "/!9.*" {

     

    pool APP03_2321_pool

     

    }

     

    "/!b.*" {

     

    pool APP04_2321_pool

     

    }

     

    "/!d.*" {

     

    pool APP05_2321_pool

     

    }

     

    default {

     

    log local0. "Rejected request for [findstr [TCP::payload] "/siebel" 0 " "]"

     

    discard

     

    }

     

    }

     

    }

     

     

    What's the wildcard " * " for...a catchall? I wonder if it should look more like "/!5." ??
  • Sully_103006's avatar
    Sully_103006
    Historic F5 Account
    Apr 11, 2011
    Hmmm...it looks like switch -glob kinda works tho whne using this iRule I never get traffic to the APP01-APP05 pools. I think the " * " in "/!5.*" maybe causing the mismatch. The original iRule used "/!5." and matched well.

     

     

    when CLIENT_DATA {

     

    switch -glob [findstr [TCP::payload] "/siebel" 0 " "] {

     

    "/siebel/finsobjmgr_enu" -

     

    "/siebel/smobjmgr_enu" -

     

    "/siebel/eaiobjmgr_enu" -

     

    "/siebel/finsobjmgr_enu/rr" -

     

    "/siebel/smobjmgr_enu/rr" -

     

    "/siebel/eaiobjmgr_enu/rr" {

     

    pool company.org_2321_pool

     

    }

     

    "/!5.*" {

     

    pool APP01_2321_pool

     

    }

     

    "/!7.*" {

     

    pool APP02_2321_pool

     

    }

     

    "/!9.*" {

     

    pool APP03_2321_pool

     

    }

     

    "/!b.*" {

     

    pool APP04_2321_pool

     

    }

     

    "/!d.*" {

     

    pool APP05_2321_pool

     

    }

     

    default {

     

    log local0. "Rejected request for [findstr [TCP::payload] "/siebel" 0 " "]"

     

    discard

     

    }

     

    }

     

    }

     

     

    What's the wildcard " * " for...a catchall? I wonder if it should look more like "/!5." ??
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Apr 11, 2011
    * will match zero or more of any character for string patterns:

     

     

    http://www.tcl.tk/man/tcl8.4/TclCmd/string.htmM36

     

     

    * Matches any sequence of characters in string, including a null string.

     

     

    When it's not matching one of the /!... patterns, what case is the request going to? What are some example values for the findstr command's output?

     

     

    Aaron
  • Joel_Moses's avatar
    Joel_Moses
    Icon for Nimbostratus rankNimbostratus
    Apr 11, 2011
    When it tries and fails to do a switch match, Sully, what does it log in the LTM logs? Can you post some of those? I would be willing to bet that it is not matching some sort of content just prior to the /! string... The original iRule used "contains" there, which probably means our match needs to be modified to account for that. Glad to help...
  • Sully_103006's avatar
    Sully_103006
    Historic F5 Account
    Apr 12, 2011
    The string usually looks something like:

     

     

    pool.company.org:2321/siebel/finsObjMgr_enu/!5.8d0ac.d0005c.4d9e146d.000013964d9d0cf4

     

     

    ...looking at "switch -regex" now.