iRule to apply Dynamic Bandwidth Controller Policy depending on Client subnet
Hi all, We have a requirement to apply different Dynamic Bandwidth Controller Polcies depending on the client subnet. This needs to operate on both traffic from client and from server. I have an example which works for all Clients, but need to assign different limits based on client subnet. when CLIENT_ACCEPTED { set mycookie [IP::remote_addr]:[TCP::remote_port] BWC::policy attach dynamic_BC $mycookie } when SERVER_CONNECTED { set mycookie [IP::remote_addr]:[TCP::remote_port] BWC::policy attach dynamic_BC $mycookie } An example of what I wish to achieve: Client address is in 10.200.0.0/22 then 1MBit maximum upload/download enforced. Client address is in 10.204.0.0/22 then 10MBit maximum upload/download enforced. Thanks in advance! Steve
Referencing flowEndSysUpTime (21) and flowStartSysUpTime (22) IPFIX Entities in iRule
I am trying to see if I can setup F5 to sent IPFIX data to Cisco Stealthwatch (Lancope). Two required IP Flow Information Export (IPFIX) Entities are flowEndSysUpTime (21) and flowStartSysUpTime (22). I have been following instructions from here to create the IPFIX template iRule. How do I reference relative timestamps in this iRule? IANA Documentation mentions that this is related to sysUpTime or systemInitTimeMilliseconds on the F5. I am guessing that I need to reference this at the beginning and end of flow, but I am not sure 100% how to do this. Thanks for your help.
Increase TPS per host IP
Hi, Our team is asking me to increase TPS per host IP from 30 to 90. They provided me an irule which is currently serving. According to team, this irule is limited for 30 TPS per host IP and I need to find right value for "maxRate, timeout and related" Can someone please help me in the modification of this rule and also explain what this irule do (step by step)? it will be really very helpful. Thanks in advance when RULE_INIT { set static::maxRate 900 * 3 set static::windowSecs 1 set static::timeout 30 } when HTTP_REQUEST { if { [HTTP::method] eq "GET" } { set getCount [table key -count -subtable [IP::client_addr]] log local0. "getCount=$getCount" if { $getCount < $static::maxRate } { incr getCount 1 table set -subtable [IP::client_addr] $getCount "ignore" $static::timeout $static::windowSecs } else { log local0. "Exceeded the number of requests allowed. $getCount" HTTP::respond 501 content "Request blockedExceeded requests/sec limit." return } } }
iRule to redirect with an elseif statement
hi Dev's Want an iRule to detect the URL – http://xxsupplier.xx.com/supplierguide and re-direct it to https://xxsupplier.xx.com/supplier_guide.html But, if the user enters just http://xxsupplier.xx.com we want them to be redirected to the HTTPS VIP of the same name I have the following iRule, however it does not seem to execute the 2nd part. It WILL detect http://xxsupplier.xx.com/supplierguide and redirect to https://xxsupplier.xx.com/supplier_guide.html However if the user simply enters http://xxsupplier.xx.com the request in the browser will say ‘cannot connect” Thus, my conclusion is that the ‘elseif’ part of my iRule isn’t working. Any help greatly appreciated. There are VIPS defined on both 443 and 80 with the same IP address. when HTTP_REQUEST { set host [HTTP::host] if { [HTTP::host] equals "xxsupplier.xx.com" and [HTTP::uri] starts_with "/supplierguide" } { HTTP::redirect "; } elseif { [HTTP::host] } { HTTP::respond 302 Location "https://$host/" } }Restrict directory by IP
This first irule IP restriction works for "discard" but the second one does not do the redirect. Any help is appreciated. when HTTP_REQUEST { if { [string tolower [HTTP::uri]] starts_with "/hello" and ![IP::addr [IP::client_addr] equals 152.140.0.0/16] } { discard } } This does not work it gets a 404 when HTTP_REQUEST { if { [string tolower [HTTP::uri]] starts_with "/hello" and ![IP::addr [IP::client_addr] equals 152.140.0.0/16] } { HTTP::redirect "; } }
