Forum Discussion

Austin_Geraci's avatar
Austin_Geraci
Icon for MVP rankMVP
Nov 17, 2010

matchclass, uri routing, and cookie persist & snat irule

Hey guys and gals, it's been a bit, I hope all is well.

Please review the below scenerio and let me know if i'm missing something, or if you would do anything differently..

I worked up the below iRule, I'd like to route traffic to one specific pool based on a class of uris, if no match, I'd like to route to another pool and use cookie persist... Simple enough.

The Virtual Server is terminating SSL and re-encrypting it.. using an client and server SSL profile..

In addition the VS is already using a snat iRule.. My thought is to juse use it first..Should I combine the snat iRule, or just keep it and use the below one after the snat iRule?

I should note, the box is running 10x on the 8900 platform.

Thanks!

iRule



when HTTP_REQUEST {
 set uri [string tolower [HTTP::uri]] 
log local0.notice "Incoming Request uri: $uri" 
if { [matchclass [HTTP::uri] starts_with $::myclass] } { 
   log local0.notice "Directing to secure_pool"    
   pool match_pool
 } else {
 log local0.notice "Directing to server_pool" 
  pool server_pool
 persist cookie
}
class

class myclass {

/myfirsturi

/myseconduri

/etcetcetc

}

[/

application delivery
dev
devops
iRules

18 Replies

Sort By
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Nov 18, 2010
    Do you get an error when trying to save the iRule or during runtime when it's executed? This loaded for me on 10.2.0: 

    
when HTTP_REQUEST {
   if { [class match [HTTP::uri] starts_with myclass] } { 
      log local0. "Matched"
   }
}

    In 10.x, reference the class using $::myclass will just return the class name:

    when RULE_INIT {

    log local0. "$::private_net"

    }

    < RULE_INIT>: private_net

    Aaron
  • Austin_Geraci's avatar
    Austin_Geraci
    Icon for MVP rankMVP
    Nov 18, 2010
    When trying to save the iRule..

     

     

    I'm running 10.2.0 1789.0 HF2, on this particular box..
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Nov 18, 2010
    Or does the class name have a hyphen in it? If so, you could either redefine the class replacing the hyphen with an underscore, or you could probably escape it with curly braces: {my-class}.

     

     

    Aaron
  • Austin_Geraci's avatar
    Austin_Geraci
    Icon for MVP rankMVP
    Nov 18, 2010
    No, only hyphen exists in the actual rule name..

     

     

     

    01070151:3: Rule [www-myrulename] error: line 4: [can't find value_list] [class match [HTTP::uri] starts_with myclassname]
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Nov 18, 2010
    I'm fairly certain that indicates the class myclassname doesn't exist. Can you double check that the class name is exactly the same in the iRule?

     

     

    Aaron
  • Austin_Geraci's avatar
    Austin_Geraci
    Icon for MVP rankMVP
    Nov 18, 2010

    Yep definitely the same.. As soon as I change "class match" to matchclass it works... odd..

     

  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Nov 18, 2010
    Is the class defined as a string datagroup? Can you post an anonymized copy of the 'b class myclassname list' output?

     

     

    Thanks, Aaron