The f5-big-ip tag has no wiki summary.
0
votes
0answers
17 views
Any iControl API equivalent to 'b merge' in BIG-IP?
I want to deploy configurations (virtual server, pools) to my bigip server, based on the files which have same format as /config/bigip.conf.
However, the iControl 'create' API for virtual server and ...
1
vote
1answer
38 views
F5 Packet filtering or iRules or both?
I need to set-up a custom filter for a virtual host that requires both ip address checks and URL check. Like so:
_if_ _(_ http-request matches url _and_ ip is from certain host/net range _)_
...
0
votes
0answers
69 views
F5 authentication using kerberos keytab
Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
0
votes
0answers
147 views
F5 Big-IP no longer works for Linux clients [closed]
The company I work for uses F5 BIG-IP as a VPN.
I use a Linux workstation so I used a Firefox based client to connect to the VPN. Everything was fine until site support rolled out an upgrade to the ...
1
vote
1answer
69 views
F5 Action on Service Down
Does anyone know how the F5 rebalances traffic when you configure "Action on Service Down" to None. i.e say there are active connections and your have updated the health check so that the server is ...
0
votes
0answers
351 views
apache2 Redirect permanent and ProxyPass confusion
I am trying to setup an apache2 in front of a JBoss application. There are 2 servers with this setup. There is a hardware load balancer in front of the 2 apache2. The setup looks something like:
...
0
votes
0answers
56 views
HTTP-CLASS-Redirecting traffic-F5
Can we redirect https traffic to a particular real server using http-class in F5? i.e whether http-class works with both http and https traffic.?
3
votes
2answers
110 views
Is it generally better to compress content on the proxy server or the app server?
We're using an F5 for load balancing and SSL proxying. Behind it we're serving up java applications with Tomcat instances. These are fairly small applications - hundreds of concurrent users.
I'd ...
0
votes
1answer
117 views
Big IP F5 outbound HTTP issues
We've tried upgrading from 9.x to 10.2 on our F5 Big IP 3400 and everything went over fine apart from one thing. We're unable to establish any outbound HTTP (80) connections from any servers that are ...
1
vote
1answer
45 views
Server won't reply to POST request
I'm working on a WordPress site that's served by two lighttpd backends behind an F5 load balancer.
Previously, the site was served by a single lighttpd server behind a nginx reverse proxy, and ...
1
vote
1answer
346 views
F5 BIG_IP persistence iRules applied but not affecting selected member
I have a virtual server. I have 2 iRules (see below) assigned to it as resources.
From the server log it looks like that the rules are running and they select the correct member
from the pool after ...
1
vote
1answer
174 views
F5 BigIP upgrade from 9.x to 10.x
Having a few difficulties upgrading a Big IP 3400 from 9.4.8 to any version 10.x image.
The following are the versions I've tried:
10.1.0.3341.0
10.2.2.763.3
10.2.3.112.0
10.2.4.577.0
To upgrade ...
0
votes
1answer
98 views
Predictive vs Least Connection Load Balancing Techniques
I have a windows based desktop application that communicates via TCP to the application servers. (windows 2003). No sticky sessions between client calls. We have exactly 2 servers to load balance and ...
4
votes
1answer
245 views
HAProxy: session stickiness triggered by response header possible?
I'm investigating HAProxy as a possible replacement for F5.
F5 is capable of persisting a session based on a response header value:
when HTTP_RESPONSE {
set session [HTTP::header X-Session]
if ...
0
votes
0answers
55 views
F5 GTM DNSSEC ZSK id numbers out of sync
My GTMs have been working ok since we setup DNSSEC. We upgraded to 10.2.4 and ran into a problem - no DNSSEC responses at all. I booted back to 10.2.3 and now my ZSK id numbers aren't the same on both ...
0
votes
1answer
622 views
301 redirect Rule For Load Balance F5 BigIp
I have a load balancer F5 Big ip for my website. Currently, I am having 302 redirect in place; however, I wanted to apply 301 but dont know how.
For example:
My website (abc.com) when typed 302 ...
0
votes
1answer
268 views
BIG IP - HTTPS Health Monitor setup
I have a Web site that we have setup a health monitoring pages so we can take our servers in and out of the Big-IP as we see fit. Now we have just moved onto Big-IP and the issue I have hit is that ...
0
votes
2answers
657 views
Possible to redirect from HTTPS to HTTP behind load-balancer?
I have a basic ASP.NET application that sits behind an F5 load-balancer.
Incoming SSL requests (over HTTPS) terminate at the load-balancer and all internal communication between the load-balancer and ...
1
vote
1answer
446 views
What's the best way to detect whether an incoming request is secure?
Is there a preferred method of detecting HTTP vs. HTTPS on an incoming request to an F5 load-balancer? We are attempting to detect secure vs. non-secure with an iRule and pass a corresponding header ...
2
votes
2answers
2k views
F5 Big-IP iRule - HTTP Redirect
I have just started to work with F5's Big-IP and I have a question about iRules and HTTP redirects. We are moving to offload our SSL from our web servers and onto the F5, our application as it stands ...
0
votes
2answers
733 views
does bigIP support sticky session
Does BIG IP support sticky sessions?
I have 2 apache's behind a Big IP box at my partner end. Need to know whether Big IP supports sticky sessions.
My apache has the sticky session enabled. All ...
0
votes
2answers
442 views
F5 Networks VPN
I have a Windows 2008 server which needs to establish a VPN connection to a company that is using a product from F5 Networks.
They sent a VPN URL, username and password to me for establishing the ...
3
votes
2answers
2k views
Load balancing with F5 Big-IP using only a single interface
I've been tasked with configuring our F5 Big-IP LTM. It's running 9.4.8.
I've read through the docs a bit and I'm a little confused. It specifies that there are two default VLANs: internal and ...
3
votes
2answers
147 views
F5 rule deployment and source control
I'm a developer, our Ops team are currently doing F5 rules manually. And nothing is in a source control of any kind.
I want to get to the point where there is a single file in source control, which ...
0
votes
1answer
262 views
Outbound SSL connections via F5
I have applications that make HTTPS connections to other servers. Is it possible to somehow use Big-IP so that if the servers request a client certificate Big-IP will add it in? Or can the ...
0
votes
0answers
738 views
TCP Connection drop with F5
I am going bonkers trying to explain some TCP connection issues I am seeing. Can you pls help?
Consider this scenario:
Server A has IP: 10.20.30.40
Client B has IP: 50:60:70:80
A is hidden behind ...
1
vote
1answer
217 views
WCF custom certificate validator not invoked in BIG-IP environment
My WCF service with a custom client certificate validator works fine in my non load balanced environment.
When first deployed to BIG-IP environment there was a problem with it stripping SSL ...
4
votes
1answer
944 views
How can I disable and re-enable machines in a BIG-IP pool via ssh?
I can't seem to find any simple examples of disabling and re-enabling machines using the ssh interface. Can someone give me a brief example or a pointer to decent documentation?
0
votes
2answers
351 views
URL rewriting for WordPress Network (Multisite) subsite
We have an install of WordPress Network (Multisite) that has multiple blogs running under the url blogs.exampleurl.com where each subsite is blogs.exampleurl.com/site1 /site2 etc...
We have a user ...
0
votes
2answers
396 views
BigIP load balanced Rails 3 / Apache app not handling selective SSL correctly?
So here's the setup. I've got a Rails 3 application deployed to two servers, both
running Apache2, both with identical VirtualHost configs, both operating on Passenger.
There are a few routes in the ...
2
votes
1answer
176 views
complicated bonding and network question
I am not a network guy and would like to know how can I setup the below two configurations and their pros and cons:
Networking component: --
WAN: Cisco 2970 * 1
Load Balancer: F5 switch 1600 * 2
...
1
vote
1answer
376 views
How can I version controll my F5 Big-IP LTM load balancer configs while allowing changes via iControl or the web interface
Currently we use F5 Big-IP LTMs (IP load balancers) in our environment for load balancing. We have an existing process for making changes to LTM configs and pushing them out. I'm trying to figure out ...
1
vote
2answers
553 views
Is F5 Big-IP Routing by DNS Names (on one IP address and port) Possible?
In IIS, it is possible to listen for many DNS names on one IP address and port and then direct users to different websites based on the DNS name.
Is the same thing possible with F5 Big-IP devices?
0
votes
1answer
277 views
F5 LTM 10.2 and MSSQL 08R2
We have a mirrored SQL server setup with a pair of LTM's holding the mirror VIP. We're trying to setup a health monitor that runs a query against both servers in the mirror and directs traffic to the ...
1
vote
1answer
1k views
Big IP F5 Basics (show run/show conf/term len 0)
I've tried to find the basics in a Big IP manual but it seems to me the device is marketed towards GUI users only.
Meanwhile I want to write a few scripts to automate tasks on the load balancer. ...
0
votes
2answers
186 views
Any load balancers using Chrome's JavaScript engine? [closed]
F5 has TCL which is horrific to program. A10 copied.
Are there any programmable load balancers out there that are looking forward? Node.js seems to have blazed the trail and proven it works and ...
1
vote
2answers
623 views
Creating CNAME to delegated domain
We are trying to configure F5 to do load balancing on 4 sub domains similar to this article.
For Example
prod.wip.example.com. NS F5NS1.example.com.
prod.wip.example.com. NS ...
1
vote
1answer
729 views
F5/BigIP rule to redirect affinity-bound users from INACTIVE pool node to other ACTIVE node
We have several server nodes set up for the end users of our system and because we don't use any kind of session replication in the app servers, F5 maintains affinity for users with the ACTIVE node ...
3
votes
1answer
936 views
NTLM, Kerberos and F5 switch issues
I'm supporting an IIS based application that is scaled out into web and application servers. Both web and applications run behind IIS. The application is NTLM capable when IIS is configured to ...
0
votes
1answer
565 views
Connection pooling through an F5 Big-Ip SQL VIP
I've got a Big-IP pool managing a couple SQL servers in an active/inactive rollover approach - there's only ever one in the pool at a time.
Initially I was enabling/disabling the nodes in the pool, ...
2
votes
1answer
891 views
How-To Configure Weblogic, Agile PLM and an F5 LTM
Agile, Weblogic, and an F5 walk into a bar ...
I've got this
Agile PLM v 9.3
Running on WebLogic, two managed
servers.
An F5 BigIP LTM.
We're upgrading from Agile v 9.2.1.4 running on OAS.
The ...
0
votes
2answers
708 views
SQL instance through F5 BigIP VIP
We have a SQL 2008 clustered named instance Server01\instance02. The port is set to static 1466. We'd like to be able to connect using the name through a F5 Big IP Virtual IP.
We've set up a VIP ...
0
votes
1answer
299 views
Set up DNS or F5 VIP to send traffic to a specific port [duplicate]
Possible Duplicate:
How to use DNS to redirect domain to specific port on my server
I have a clustered SQL instance set up at SERVER01\dev08
It's assigned to a static port of 1466. Can I ...
2
votes
1answer
856 views
Proxy SSL from load balancer
A server admin who is setting up a load balancer asked me if I wanted to:
Host SSL certs directly on web servers
or, Proxy SSL from the load balancer
I've only done the former implementation. Can ...
2
votes
5answers
1k views
Testing strategies for f5 bigip
I am a developer who is used to being able to test and debug code.
Occasionally I have to make changes to our load balancer configuration. As far as I can see, if I mess this up it could stop the ...
1
vote
1answer
690 views
Big IP orphaned connections
Let me state up-front that I know just enough about networking at this level to be dangerous, so if I say something stupid, please be kind.
I am using a Big IP load balancer in front of 3 Apache ...
1
vote
2answers
491 views
What are the licensing requirements for the Big IP F5 Load balancer?
I've seen older f5's on ebay for about $500 for a pair. I've heard they work great for load balancing, but I'm trying to figure out what the ongoing costs for them are. Does anyone know what kind of ...
0
votes
1answer
1k views
Problem while adding a route to F5 BigIp version 9
I want to add a route for outbound traffic from BigIp v9. I have WANem machine configured which simulates the network traffic and want to add this as a router between BigIp9 virtual server and Client. ...
6
votes
2answers
4k views
F5 Big-IP, X-Forwarded-For and IIS Logs
I've got an F5 Big-IP that is mangaged by our hosting provider. It's dedicated to our private VLAN, etc. Works great :)
We requested them to add in an X-Forwarded-For HTTP-Header field. They've done ...
8
votes
3answers
17k views
What is the downside to sticky sessions with load balancers?
we have a web farm of IIS7 machines. Works great. In front of them is an F5 Big-IP hardware load balancer. Also working fine :)
Now, currently we're using an ASP.NET State Service to handle our ...
