Forum Discussion

Daniel_02_13867's avatar
Daniel_02_13867
Icon for Nimbostratus rankNimbostratus
Nov 28, 2013

Using source address affinity persistence, but exluding certain IP addresses

Hi,

 

I would like to use source address affinity persistence, except for a few known IP addresses for which I do not want to use any session persistence at all (for stress testing the cluster, etc).

 

Can I configure this without having to re-implement source address affinity persistence with an iRule?

 

f5 big-ip ltm
persistence

2 Replies

Sort By
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Nov 28, 2013

    Daniel,

     

    If you didn't want iRules, and you were on TMOS v11.3 or above, then I can only think of two virtual servers (same ip:port combination) and then configure the Source Address bit of the VS config. On the one you can apply src add persistence and configure a Src Address of Any (perhaps) and on the other one you don't have persistence and choose a narrow Src Address in the VS config to only match these IP addresses.

     

    Hope this helps,

     

    N

     

  • cshannahan_3137's avatar
    cshannahan_3137
    Icon for Nimbostratus rankNimbostratus
    Jun 28, 2017

    I'm in the same boat but I'm not familar with irules. I have a pool with source persistance turned on. Unfortunately we have added 2 more servers to this pool but they aren't getting used because the hosts hitting them only have 2 servers. I would like to LB across all 4. Is there a way to turn off source persistance just for 2 incoming connections? If I have to create a new vip/pool I guess I could but it will require a lot of fw changes.