TCP port still availible when VIP fails

Try discard! I use this rule for my GSS:

when CLIENT_ACCEPTED {
  if { [active_members MyPool] == 0 } {
    discard
  }
}

Worked like a champ! Thanks,

citizen_elah,

 

 

Have you ever done this with the GSS where the vip is port 0 as the back end is udp and the health check from the GSS is only tcp? I am figuring the Irule to work fine as it should disgard any packets if the nodes are dwom

I have not done this before. The only condition in the rule is no active members, so it will discard all connections in this scenario, assuming the CLIENT_ACCEPTED event is triggered. I haven't done anything with UDP so I'm not sure if this event triggers with UDP connections.

How can i do globally, i have multiple vip and its not usefull

 

 

in alteon if vip service down does not accept connection

 

 

regards

 

 

zafer

and i also tested this i rule, it didnt worked

 

 

i did telnet vip port 80

 

members down and vip accepted connection

Are you members disabled, or really down? If they're really down, it should work. If you've only disabled them and you have persistence enabled, the virtual will continue to service connections until the pool member status has been changed from allow all traffic to allow only active connections. We do this with an iControl script courtesy of Joe (attached)