Forum Discussion

Sunnypro_250536's avatar
Sunnypro_250536
Icon for Nimbostratus rankNimbostratus
Nov 21, 2017

iRule needed.

We have a requirement for configuring a Virtual server on port 443 with client side SSL offloading. There are 3 back-end servers for example 1.1.1.1 ,2.2.2.2 ,3.3.3.3 on ports 7801 and 7802.so the requirement is that the VIP needs to be load balanced to these server on port 7801 and 7802, i.e; 1.1.1.1 on 7801 &7802 , similarly for 2.2.2.2 and 3.3.3.3, we are having a 3 different health check ICMP , TCP and http health monitor and it needs to pass all three checks. Apart from this we have a additional health check on port 5040 and this is only for health check it should not handle any traffic. below are the details

 

Additional health check is required for the load balancer. This is TCP half open check on the port 5040. This port should be excluded from load balancing and should not be represented on frontend. It’s used only for health check. If this port is unavailable on any particular application host, then all application nodes running on this host have to be marked as not alive.

 

Can someone suggest what is a best way to have this setup, I think we can have a iRule configured based by creating 3 different pools for each servers on port 5040 and have traffic send to the backend servers on that ports mentioned, for example creating a pool for 1.1.1.1 on port 5040 and have a TCP half open health check, and write a iRule such that if this pool is UP so to nodes 1.1.1.1 on port 7801 and 7802 or if this pool is UP go to pool 1.1.1.1 similarly fpr rest. Can someone help me with this setup

 

1 Reply

  • eey0re's avatar
    eey0re
    Icon for Cirrostratus rankCirrostratus

    Rather than create a pool for the port 5040, create a custom monitor of type TCP Half Open. Leave all the values at defaults except for

    Alias Service Port
    which you should set to 5040. Associate this monitor with your pool, and it will monitor port 5040 instead of the pool member's port.

    Or, if you're happy for the whole node to be marked down, you could associate this monitor with your three nodes instead of the pool.