-
Url Redirect without url change
We are trying to write a script that redirects a user when they enter a url, but keeps the url the same. We have the url - https://bla.company.com When a user enters this url we want to redirect them to - https://otherserver/site but we want to keep the url as https://bla.company.com I can get this working so that it'll…
-
Simple URL Change
Posted by danguijun Good day Folks, I am looking for a way to change all requests that will arrive at Virtual Server 'VIP_Example' to add/ change the whole URL. I believe we could do the trick sing simple aFlex, but i need assistance on this field. There are two case studies for this change: For example: Case Study#1 - add…
-
URL redirection-rewrite using part of the URI
Hello, I been working on an aflex to do redirection of a web site. Here's what I' trying to achieve: Src host: mySRCsite.com Src path: /services/?app=test&annee=2022 Dst host: myDSTsite.com Dst path: /test/app1/USER=toi&LANGUE=FM&AN_ATTRB=2022 Redirection works, problem is that is hard coded at this time. What I want is…
-
HTTP Origin header not matching the base_url.
Wedsite owner getting below error related to revrse proxy header below is te aFLEX rule which we had added on on A10, do we required any addition rules to this work ?? X-Forward ?? ======================================== when HTTP_REQUEST { set URI [string tolower [HTTP::uri]] switch -glob $URI { default { HTTP::header…
-
Redirect IP Public
Hello, I need your guide for a query I have. I want to perform a redirect to block access to a public IP that I have in the balancer + URI, but I can't create aFlex. Can this be done?
-
No Server Certificate Validation
Hello Team I currently have a server that does not load the page because it has an expired certificate. I was asked to pass this service through the balancer and have the A10 not validate the server certificate and load the page. On the advanced configuration of the server's virtual port I enabled the NO SSL option, as I…
-
A10 vThunder ADC/SLB - Redirection based on URL
Hello, I will try to do more research to see if this was already covered in another post, but so far haven't been able to find exactly what I'm looking for. Is it possible to do a redirect based on which URL the end user goes to for whats described below? Or is this completely wrong and I should be looking for an…
-
Gracefully down
How to make a virtual server / server down gracefully ?
-
CPU AVAREGE
Hello, Can you help me to create a script with aflex to get cpu avarege and at the same time create a file?
-
Persistence issue with aflex
Hi, I have a very simple script handling redirection to an outage server if my primary servers aren't available (see below). I have however got an issue that when persistence is applied (source-ip or cookie persistence), users are being persisted to the outage pool even after the primary service group is back online. Is…
-
F5 automap feature
Hi, I have one F5 with irule contain "automap snat", this functionality allows changing the IP when the destination is local to one of the F5 in order to prevent asymmetric routing. The automap options tells to BIG-IP to decide what source ip to use to reach the destination network. I rule like this when CLIENT_ACCEPTED {…
-
Retrieve the highest number of requests
If I want to add one more rule which is to black list the highest number of DNS query when the total number of DNS queries exceed the threshold value (i.e. $totalcount). How can I retrieve the IP address which has the highest number of DNS query? set totalcount [table incr tmp_table [IP::client_addr]] if { $totalcount >…
-
Routing Traffic Via Inactive VRRP-A Machine
Hello everyone, since we're seeing weird timeouts to external services with any of the more recent versions greater than 5.2.1-p2, support suggested to set up some sort of debug environment for them to check. Is it possible to route traffic from physical servers via a virtual ethernet interface on the inactive machine…
-
Redirect 302 with aFlex
Hello, I need your help and knowledge on A10 with aFlex. I am trying to create a 302 redirect for a site that is published on the internet but when testing the redirect it does not execute it, this is my code so that you can guide me: when HTTP_REQUEST { if {[HTTP::host] == "https://recargaweb.imperial.com/" } {…
-
health check service testing vs host logging
We are in the process of load balancing radius with ACOS 4.1.4-GR1-P2 with Direct Server return. The load balancing works well, and now I have some awkward consequences I need to deal with. The failover works when a health check is enabled and marks the service as offline if the service is not functional. so we need a…
-
aflex script requirement to evaluate host status
I am working on load balancing radius auth/acct to two MS NPS servers. The load balancing works and with radius there is a need to persist a radius client with the server that it happens to communicate with. The starting point for that is an aflex script found at…
-
Scripiting questions (Aflex)
We are planing to use the TCP traffic to autenticate the UDP traffic on our TPS, but we have no idea how to proceed due to lack of documentation Its possible to do something like: when UDP_REQUEST { if { [TCP::connection] == 1 } [UDP::authenticate] elseif { [TCP::connection] == 0 } drop
-
How to use the a10.acos_axapi.a10_file_aflex module in Ansible
Hello, I am trying to deploy aflex scripts to an a10 load balancer in Ansible with the a10_file_aflex python module in the a10.acos_axapi Ansible collection. However, everytime I run my script, there are some weird errors that appear about the syntax of the structure of my ansible task and some mistakes of the aflex…
-
DNS CAA record response
I am doing things like this: set rr1 [DNS::rr $name 0 IN TXT "some text here"] DNS::answer insert $rr1 Now I need to return a CAA record and can't find a way to format the entry to do this. A CAA record looks like this in a zone file. mydomain.com. IN CAA 0 issue "letsencrypt.org" mydomain.com. IN CAA 0 issuewild ";"…
-
Preserve Port on HTTP Redirect
Hi Everyone: We have an interesting issue we're trying to tackle. We have a Virtual Server with multiple virtual ports (http:80, https:443, https:4444, https:4445, etc). We currently have a working redirect script (similar to a lot of posts on here) for 80 to 443 and it is working fine for several of our virtual servers:…
-
is aflex has similar features like lb::detach
Hello everyone, we are trying migrate from F5 to A10, but we encountered some problems there is part of our using irule , when HTTP_REQUEST { if { [string tolower [HTTP::uri]] starts_with "/aaa/bbb/ccc/" } { if { [HTTP::header exists "aaa"] } { LB::detach persist uie [HTTP::header "aaa"] } } and we found that aflex didn't…
-
Monitoring via XML File GET
Hi guys, I have a web service that provides a URI that return XML indicating the health of the system. Is it possible to get this XML and parse it and make a load balancing decision based on this.
-
Aflex to fix Chrome 80 Samesite Cookie attribute
SameSite is making headlines because Google’s Chrome 80 browser will enforce a first-party default on all cookies that don’t have the attribute set. This will lead to repercussions if companies who rely on third-party cookie requests don’t make changes by the February 4 deadline. Since we have a collaboration portal, we…
-
How to hide directory from URL site
Hi!! I'd like how I can hide the directory from the site as example bellow: Site: http://site.com/index.php?page=items But in the browser only show http://site.com/ Is that possible be configurated in A10? Thanks, Rafael Morato
-
Aflex logic not taking precedence over session persit cookie
Hi, We have an aflex rule that redirects requests based on the url. There is also a persistence cookie set. The issue is when the url switches, the aflex logic should send the request to a new server pool, but the cookie appears to be taking precedence and forcing the request back to the original server the user was sent…
-
an example of a DNS external health monitor
Hi, Does anyone have an example of a DNS external health monitor? The monitor should query an A record and check the IP address and provide up/down status based on the IP address matching a given/set IP address. Thanks
-
Safari Prefetch
Is there a way to drop requests with the "Purpose: prefetch" header? These appear to be causing stale requests to iOS browsers.
-
aFlex for log mail from,to, on STARTTLS/TLS mails in ssl-proxy port
Hi, i'm new in this forum and with a10 aFlex. Device: A10 thunder 3030s Os: 2.7.2-P11(build: 77) I've configured a SMTP service in one VIP with two ports: 25 - SMTP 2530 - STARTTLS/TLS (port with ssl-client template in mode ssl-proxy) and (for GDPR law) need to log the ip, mail from, mail to, message id, ip from, vip,…
-
AD group membership determine single factor vs dual factor Auth
I have a site where Active Directory group membership should determine whether users are prompted for single-factor or two-factor authentication. GroupA (single factor) - Windows server group NTML GroupB (two-factor) - RADIUS: duo I imagine there is away with an aFlex script after primary authentication to query group…
-
slb.aflex.upload not working
Tried various ways with trying to call the api endpoint direct as well as Axios but I cannot update an Aflex rule programatically. I always get a JSON error ({"code": 1174, "msg": "Invalid JSON document."}}), c:/temp/1.file below is a basic iRule for which I've tried to save also in various encodings, ASCII, UTF-8 etc:…
