-
How to inject Server Name Extension (SNI) on server-side based on HTTP Host
We are replacing the F5 load balancer. Could you please let me know how to implement this iRule using aflex or other methods? he client request SSL packet header does not contain SNI, and it needs to be extracted from the Host field of the HTTP packet header. F5 irules： when HTTP_REQUEST { set sni_value [getfield…
-
How to perform a case-insensitive match of the requested URL path.
Hello, How can I perform a case-insensitive match for the requested URL path? For example: when HTTP_REQUEST { if { [HTTP::path] equals "/NotificationServer" } { pool example_service-group } } And a case-sensitive example is: http://host/NotificationSERVER Regards
-
Snat in NHLD with alternate server
Hi I have this scenario in a client´s infrastructure where they have 2 Internet links in active pasive mode slb server LINK-1 20.20.20.1 alternate LINK-2 port 0 tcp port 0 udp slb server LINK-2 30.30.30.1 port 0 tcp port 0 udp --------------------------------------------------------------------------- slb service-group…
-
Redirect traffic based on Destination IP
Hi guys I´m trying to redirect traffic based on destination IP using an Aflex, for example if a internal user sends traffic to 20.20.20.20 the A10 will redirect the traffic to a specified service group Aflex: Test #1 when CLIENT_ACCEPTED { if { [IP::addr [IP::remote_addr] equals 20.20.20.20] } { pool APACHE } } Test #2…
-
No Server Certificate Validation
Hello Team I currently have a server that does not load the page because it has an expired certificate. I was asked to pass this service through the balancer and have the A10 not validate the server certificate and load the page. On the advanced configuration of the server's virtual port I enabled the NO SSL option, as I…
-
Maintain session with ChatID object
Hello, I need to know if an aFlex can be created that maintains the session with the ChatID object, this object is the ID of the chats that clients have with executives, which close the session before the client ends the chat.
-
Create Rewrite
Dear, I need your help to create an aFlex with a rewrite that does the following: sucusales.mydomain.com to chile.localisti.co Thanks a lot
-
Url Redirect without url change
We are trying to write a script that redirects a user when they enter a url, but keeps the url the same. We have the url - https://bla.company.com When a user enters this url we want to redirect them to - https://otherserver/site but we want to keep the url as https://bla.company.com I can get this working so that it'll…
-
Simple URL Change
Posted by danguijun Good day Folks, I am looking for a way to change all requests that will arrive at Virtual Server 'VIP_Example' to add/ change the whole URL. I believe we could do the trick sing simple aFlex, but i need assistance on this field. There are two case studies for this change: For example: Case Study#1 - add…
-
URL redirection-rewrite using part of the URI
Hello, I been working on an aflex to do redirection of a web site. Here's what I' trying to achieve: Src host: mySRCsite.com Src path: /services/?app=test&annee=2022 Dst host: myDSTsite.com Dst path: /test/app1/USER=toi&LANGUE=FM&AN_ATTRB=2022 Redirection works, problem is that is hard coded at this time. What I want is…
-
HTTP Origin header not matching the base_url.
Wedsite owner getting below error related to revrse proxy header below is te aFLEX rule which we had added on on A10, do we required any addition rules to this work ?? X-Forward ?? ======================================== when HTTP_REQUEST { set URI [string tolower [HTTP::uri]] switch -glob $URI { default { HTTP::header…
-
Redirect IP Public
Hello, I need your guide for a query I have. I want to perform a redirect to block access to a public IP that I have in the balancer + URI, but I can't create aFlex. Can this be done?
-
A10 vThunder ADC/SLB - Redirection based on URL
Hello, I will try to do more research to see if this was already covered in another post, but so far haven't been able to find exactly what I'm looking for. Is it possible to do a redirect based on which URL the end user goes to for whats described below? Or is this completely wrong and I should be looking for an…
-
Gracefully down
How to make a virtual server / server down gracefully ?
-
CPU AVAREGE
Hello, Can you help me to create a script with aflex to get cpu avarege and at the same time create a file?
-
Persistence issue with aflex
Hi, I have a very simple script handling redirection to an outage server if my primary servers aren't available (see below). I have however got an issue that when persistence is applied (source-ip or cookie persistence), users are being persisted to the outage pool even after the primary service group is back online. Is…
-
F5 automap feature
Hi, I have one F5 with irule contain "automap snat", this functionality allows changing the IP when the destination is local to one of the F5 in order to prevent asymmetric routing. The automap options tells to BIG-IP to decide what source ip to use to reach the destination network. I rule like this when CLIENT_ACCEPTED {…
-
Retrieve the highest number of requests
If I want to add one more rule which is to black list the highest number of DNS query when the total number of DNS queries exceed the threshold value (i.e. $totalcount). How can I retrieve the IP address which has the highest number of DNS query? set totalcount [table incr tmp_table [IP::client_addr]] if { $totalcount >…
-
Routing Traffic Via Inactive VRRP-A Machine
Hello everyone, since we're seeing weird timeouts to external services with any of the more recent versions greater than 5.2.1-p2, support suggested to set up some sort of debug environment for them to check. Is it possible to route traffic from physical servers via a virtual ethernet interface on the inactive machine…
-
Redirect 302 with aFlex
Hello, I need your help and knowledge on A10 with aFlex. I am trying to create a 302 redirect for a site that is published on the internet but when testing the redirect it does not execute it, this is my code so that you can guide me: when HTTP_REQUEST { if {[HTTP::host] == "https://recargaweb.imperial.com/" } {…
-
health check service testing vs host logging
We are in the process of load balancing radius with ACOS 4.1.4-GR1-P2 with Direct Server return. The load balancing works well, and now I have some awkward consequences I need to deal with. The failover works when a health check is enabled and marks the service as offline if the service is not functional. so we need a…
-
aflex script requirement to evaluate host status
I am working on load balancing radius auth/acct to two MS NPS servers. The load balancing works and with radius there is a need to persist a radius client with the server that it happens to communicate with. The starting point for that is an aflex script found at…
-
Scripiting questions (Aflex)
We are planing to use the TCP traffic to autenticate the UDP traffic on our TPS, but we have no idea how to proceed due to lack of documentation Its possible to do something like: when UDP_REQUEST { if { [TCP::connection] == 1 } [UDP::authenticate] elseif { [TCP::connection] == 0 } drop
-
How to use the a10.acos_axapi.a10_file_aflex module in Ansible
Hello, I am trying to deploy aflex scripts to an a10 load balancer in Ansible with the a10_file_aflex python module in the a10.acos_axapi Ansible collection. However, everytime I run my script, there are some weird errors that appear about the syntax of the structure of my ansible task and some mistakes of the aflex…
-
DNS CAA record response
I am doing things like this: set rr1 [DNS::rr $name 0 IN TXT "some text here"] DNS::answer insert $rr1 Now I need to return a CAA record and can't find a way to format the entry to do this. A CAA record looks like this in a zone file. mydomain.com. IN CAA 0 issue "letsencrypt.org" mydomain.com. IN CAA 0 issuewild ";"…
-
Preserve Port on HTTP Redirect
Hi Everyone: We have an interesting issue we're trying to tackle. We have a Virtual Server with multiple virtual ports (http:80, https:443, https:4444, https:4445, etc). We currently have a working redirect script (similar to a lot of posts on here) for 80 to 443 and it is working fine for several of our virtual servers:…
-
is aflex has similar features like lb::detach
Hello everyone, we are trying migrate from F5 to A10, but we encountered some problems there is part of our using irule , when HTTP_REQUEST { if { [string tolower [HTTP::uri]] starts_with "/aaa/bbb/ccc/" } { if { [HTTP::header exists "aaa"] } { LB::detach persist uie [HTTP::header "aaa"] } } and we found that aflex didn't…
-
Monitoring via XML File GET
Hi guys, I have a web service that provides a URI that return XML indicating the health of the system. Is it possible to get this XML and parse it and make a load balancing decision based on this.
-
Aflex to fix Chrome 80 Samesite Cookie attribute
SameSite is making headlines because Google’s Chrome 80 browser will enforce a first-party default on all cookies that don’t have the attribute set. This will lead to repercussions if companies who rely on third-party cookie requests don’t make changes by the February 4 deadline. Since we have a collaboration portal, we…
-
How to hide directory from URL site
Hi!! I'd like how I can hide the directory from the site as example bellow: Site: http://site.com/index.php?page=items But in the browser only show http://site.com/ Is that possible be configurated in A10? Thanks, Rafael Morato
