iRule or policies based redirection based on HTTPS username behind a GTM

The F5 GTMs are never going to see the HTTPS request so not possible for any selection to take place on the DNS side.

Better option would be to forward to an LTM Virtual Server and use make the selection to forward to a select pool or another Virtual Server. You can do with with an iRule or a Traffic Policy.

Create a data group named

userToPoolMappingDG

and populate with Usernames and associated Pool names (make sure they are valid Pool names and they can include full path if required e.g.

/production/BobsPool

) and you can us the following iRule to do the pool selection:

when CLIENT_ACCEPTED {
    set default_pool [LB::server pool]
}

when HTTP_REQUEST {

    if {[HTTP::username] ne ""}{
        set pool_name [class match -value [HTTP::username] equals userToPoolMappingDG]

        if {($pool_name ne "") && ([active_members $pool_name] > 0)}{
            pool $pool_name
            return
        }
    }
    pool $default_pool
}

This iRule can be changed if needed to allow multiple matches by using the

starts_with

,

contains

or

ends_with

operator in the

class match

command.

It can be done on LTM not GTM. You can use iRule or a LTM policy. If you have more iRule in the VS, the orders of the iRules are important in terms of which one is first applied. Irule is like :

when HTTP_REQUEST {    
    switch -glob [URI::query [HTTP::uri] username] {
        "user1" -
        "user2" -
        "user3" 
        {
            pool pool123            
        }            
        "user1" -                      
        "user2" -            
        "user3"            
        {
            pool pool456                
        }
   }            
 }