Forum Discussion

Marcelo_Rodrig4's avatar
Marcelo_Rodrig4
Icon for Nimbostratus rankNimbostratus
Jul 07, 2014

Redirect HTTPS traffic to specific node on proxy load balance.

Hi, We are load balancing four bluecoat proxy servers (SG900) with bigip. Some times we have problems with persistance and HTTPS traffic. We are trying to create an iRule to redirect all https traffic to a specific node. We already done that succefuly to youtube using this iRule:

 

when HTTP_REQUEST { if { [HTTP::host] ends_with "youtube.com" } { if { [LB::status pool Pool_Bluecoat member 192.168.206.11 0] eq "up" } { pool Pool_Bluecoat member 192.168.206.11 } else { pool Pool_Bluecoat } } }

 

This work well for youtube, but this time I would like to send all https traffic to a specific node.

 

Any ideas on how to do that?

 

The Virtual server is configured as follows: ltm virtual VS_bluecoat { destination 10.30.1.10:any ip-protocol tcp mask 255.255.255.255 persist { Hash_Persistence_Bluecoat { default yes } } pool Pool_Bluecoat profiles { http { } httpcompression-tse { } tcp { } } rules { iRule_select_pool_youtube } source 0.0.0.0/0 translate-address disabled translate-port disabled vlans { Fronteira RedeLocal } vlans-enabled vs-index 33 }

 

The pool: ltm pool Pool_Bluecoat { description "Pool de equipamentos Bluecoat para proxy." load-balancing-mode ratio-member members { bc01:any { address 192.168.206.10 description "Proxy Bluecoat 01." session monitor-enabled state up } bc02:any { address 192.168.206.11 description "Proxy Bluecoat 02." session monitor-enabled state up } bc03:any { address 192.168.206.12 description "Proxy Bluecoat 03." session monitor-enabled state up } bc04:any { address 192.168.206.13 description "Proxy BlueCoat 04." session monitor-enabled state up } } monitor gateway_icmp }

 

and we use hash carp to persist the traffic. ltm rule iRule_Hash_Persist_Bluecoat { when HTTP_REQUEST { persist carp [HTTP::uri] } }

 

thanks for any help.