The F5 BIG-IP product family comprises purpose-built, enterprise-grade hardware, software and virtual load balancers.

learn more… | top users | synonyms (1)

1
vote
1answer
141 views

F5 Big-IP and WSS WebSockets

We have a F5 Big-IP load balancer that handles the SSL, so the servers behind it get HTTPS rather than HTTP (SSL off loading). I don't have version handy, but in the login page I can see "Copyright ...
2
votes
1answer
44 views

Way to convert claims tokens to Kerberos that SP2010 accepts

I'm hoping there is an F5 way to do what is described in this article: http://blog.auth360.net/2010/12/03/the-triumvirate-uag-2010sp1-ad-fs-2-0-and-kerberos/ Users login to a mobile app using ...
0
votes
0answers
41 views

Configuration of management interface on management network router

I have an F5 LTM that is being used as an IP router in addition to its regular load balancing duties. One of the networks that it's routing is our management network. But it also has a dedicated ...
9
votes
1answer
202 views

Changing node IP addresses in F5 BigIP configuration

I need to re-ip about 600 servers, which is bad enough by itself, but I've automated the entire process except for one part: F5 configuration. In all the documentation I can find, there is nothing ...
0
votes
0answers
62 views

How to specify proxy server big ip f5?

We are attempting to setup a big ip f5 and need outbound internet traffic to flow through proxy servers. Is that possible?
0
votes
0answers
47 views

Is it possible to persist a session after a server as been removed from a load balanced server pool on an F5

We have a server farm hosted in a co-location data center, because of uptime SLA's in our contract we have zero access to the F5 Load Balancer. I am curious if the following is possible to achieve. ...
7
votes
1answer
380 views

F5 Load Balancer Resends Request On Timeout

Let me preface this by saying I am not a systems administrator, I'm a programmer. Recently, our systems administrators installed F5 load balancers. Since then, I've noticed that any time a request ...
0
votes
1answer
68 views

configure F5 via Puppet

I have an Ubuntu PuppetMaster instance. I need to manage a F5 BIG-IP (v10.2.4) device. I'm following the directions for the Puppet Labs F5 module ( http://forge.puppetlabs.com/puppetlabs/f5 ). Is ...
0
votes
1answer
121 views

F5 Big-IP : pool monitors at member node level

BIG-IP 10.2.4 When configuring a pool, I can assign a monitor at pool-level. But I can also drill-down into each member node and assign a monitor. What is a use-case for assigning a health-monitor ...
0
votes
1answer
224 views

F5 Big-IP : iRule optimization of nested switch

F5 BIG-IP 10.2.4 My iRule needs to exact-match on host and wild-card match on path. when HTTP_REQUEST { switch [string tolower [HTTP::host]] { "internal.mycompany.com" { switch -glob ...
0
votes
0answers
155 views

F5 Big-IP : multiple iRules

Originally, I created a single iRule meant to route traffic to a set of services. The iRule contains nested switch statements : first match on host, then match on path. If no match, then display an ...
0
votes
1answer
53 views

Any iControl API equivalent to 'b merge' in BIG-IP?

I want to deploy configurations (virtual server, pools) to my bigip server, based on the files which have same format as /config/bigip.conf. However, the iControl 'create' API for virtual server and ...
1
vote
2answers
561 views

F5 Packet filtering or iRules or both?

I need to set-up a custom filter for a virtual host that requires both ip address checks and URL check. Like so: _if_ _(_ http-request matches url _and_ ip is from certain host/net range _)_ ...
0
votes
1answer
132 views

F5 authentication using kerberos keytab

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
1
vote
2answers
339 views

F5 Action on Service Down

Does anyone know how the F5 rebalances traffic when you configure "Action on Service Down" to None. i.e say there are active connections and your have updated the health check so that the server is ...
0
votes
0answers
484 views

apache2 Redirect permanent and ProxyPass confusion

I am trying to setup an apache2 in front of a JBoss application. There are 2 servers with this setup. There is a hardware load balancer in front of the 2 apache2. The setup looks something like: ...
0
votes
1answer
98 views

HTTP-CLASS-Redirecting traffic-F5

Can we redirect https traffic to a particular real server using http-class in F5? i.e whether http-class works with both http and https traffic.?
3
votes
3answers
220 views

Is it generally better to compress content on the proxy server or the app server?

We're using an F5 for load balancing and SSL proxying. Behind it we're serving up java applications with Tomcat instances. These are fairly small applications - hundreds of concurrent users. I'd ...
0
votes
2answers
175 views

Big IP F5 outbound HTTP issues

We've tried upgrading from 9.x to 10.2 on our F5 Big IP 3400 and everything went over fine apart from one thing. We're unable to establish any outbound HTTP (80) connections from any servers that are ...
1
vote
1answer
54 views

Server won't reply to POST request

I'm working on a WordPress site that's served by two lighttpd backends behind an F5 load balancer. Previously, the site was served by a single lighttpd server behind a nginx reverse proxy, and ...
1
vote
1answer
903 views

F5 BIG_IP persistence iRules applied but not affecting selected member

I have a virtual server. I have 2 iRules (see below) assigned to it as resources. From the server log it looks like that the rules are running and they select the correct member from the pool after ...
1
vote
1answer
284 views

F5 BigIP upgrade from 9.x to 10.x

Having a few difficulties upgrading a Big IP 3400 from 9.4.8 to any version 10.x image. The following are the versions I've tried: 10.1.0.3341.0 10.2.2.763.3 10.2.3.112.0 10.2.4.577.0 To upgrade ...
0
votes
1answer
174 views

Predictive vs Least Connection Load Balancing Techniques

I have a windows based desktop application that communicates via TCP to the application servers. (windows 2003). No sticky sessions between client calls. We have exactly 2 servers to load balance and ...
4
votes
1answer
371 views

HAProxy: session stickiness triggered by response header possible?

I'm investigating HAProxy as a possible replacement for F5. F5 is capable of persisting a session based on a response header value: when HTTP_RESPONSE { set session [HTTP::header X-Session] if ...
1
vote
1answer
1k views

301 redirect Rule For Load Balance F5 BigIp

I have a load balancer F5 Big ip for my website. Currently, I am having 302 redirect in place; however, I wanted to apply 301 but dont know how. For example: My website (abc.com) when typed 302 ...
0
votes
1answer
611 views

BIG IP - HTTPS Health Monitor setup

I have a Web site that we have setup a health monitoring pages so we can take our servers in and out of the Big-IP as we see fit. Now we have just moved onto Big-IP and the issue I have hit is that ...
1
vote
2answers
2k views

Possible to redirect from HTTPS to HTTP behind load-balancer?

I have a basic ASP.NET application that sits behind an F5 load-balancer. Incoming SSL requests (over HTTPS) terminate at the load-balancer and all internal communication between the load-balancer and ...
2
votes
1answer
609 views

What's the best way to detect whether an incoming request is secure?

Is there a preferred method of detecting HTTP vs. HTTPS on an incoming request to an F5 load-balancer? We are attempting to detect secure vs. non-secure with an iRule and pass a corresponding header ...
2
votes
2answers
3k views

F5 Big-IP iRule - HTTP Redirect

I have just started to work with F5's Big-IP and I have a question about iRules and HTTP redirects. We are moving to offload our SSL from our web servers and onto the F5, our application as it stands ...
0
votes
3answers
2k views

does bigIP support sticky session

Does BIG IP support sticky sessions? I have 2 apache's behind a Big IP box at my partner end. Need to know whether Big IP supports sticky sessions. My apache has the sticky session enabled. All ...
0
votes
2answers
630 views

F5 Networks VPN

I have a Windows 2008 server which needs to establish a VPN connection to a company that is using a product from F5 Networks. They sent a VPN URL, username and password to me for establishing the ...
3
votes
2answers
3k views

Load balancing with F5 Big-IP using only a single interface

I've been tasked with configuring our F5 Big-IP LTM. It's running 9.4.8. I've read through the docs a bit and I'm a little confused. It specifies that there are two default VLANs: internal and ...
3
votes
2answers
174 views

F5 rule deployment and source control

I'm a developer, our Ops team are currently doing F5 rules manually. And nothing is in a source control of any kind. I want to get to the point where there is a single file in source control, which ...
0
votes
1answer
377 views

Outbound SSL connections via F5

I have applications that make HTTPS connections to other servers. Is it possible to somehow use Big-IP so that if the servers request a client certificate Big-IP will add it in? Or can the ...
0
votes
0answers
1k views

TCP Connection drop with F5

I am going bonkers trying to explain some TCP connection issues I am seeing. Can you pls help? Consider this scenario: Server A has IP: 10.20.30.40 Client B has IP: 50:60:70:80 A is hidden behind ...
1
vote
1answer
302 views

WCF custom certificate validator not invoked in BIG-IP environment

My WCF service with a custom client certificate validator works fine in my non load balanced environment. When first deployed to BIG-IP environment there was a problem with it stripping SSL ...
5
votes
1answer
1k views

How can I disable and re-enable machines in a BIG-IP pool via ssh?

I can't seem to find any simple examples of disabling and re-enabling machines using the ssh interface. Can someone give me a brief example or a pointer to decent documentation?
0
votes
2answers
418 views

URL rewriting for WordPress Network (Multisite) subsite

We have an install of WordPress Network (Multisite) that has multiple blogs running under the url blogs.exampleurl.com where each subsite is blogs.exampleurl.com/site1 /site2 etc... We have a user ...
0
votes
2answers
521 views

BigIP load balanced Rails 3 / Apache app not handling selective SSL correctly?

So here's the setup. I've got a Rails 3 application deployed to two servers, both running Apache2, both with identical VirtualHost configs, both operating on Passenger. There are a few routes in the ...
2
votes
1answer
205 views

complicated bonding and network question

I am not a network guy and would like to know how can I setup the below two configurations and their pros and cons: Networking component: -- WAN: Cisco 2970 * 1 Load Balancer: F5 switch 1600 * 2 ...
1
vote
1answer
464 views

How can I version controll my F5 Big-IP LTM load balancer configs while allowing changes via iControl or the web interface

Currently we use F5 Big-IP LTMs (IP load balancers) in our environment for load balancing. We have an existing process for making changes to LTM configs and pushing them out. I'm trying to figure out ...
1
vote
2answers
667 views

Is F5 Big-IP Routing by DNS Names (on one IP address and port) Possible?

In IIS, it is possible to listen for many DNS names on one IP address and port and then direct users to different websites based on the DNS name. Is the same thing possible with F5 Big-IP devices?
0
votes
1answer
348 views

F5 LTM 10.2 and MSSQL 08R2

We have a mirrored SQL server setup with a pair of LTM's holding the mirror VIP. We're trying to setup a health monitor that runs a query against both servers in the mirror and directs traffic to the ...
1
vote
2answers
2k views

Big IP F5 Basics (show run/show conf/term len 0)

I've tried to find the basics in a Big IP manual but it seems to me the device is marketed towards GUI users only. Meanwhile I want to write a few scripts to automate tasks on the load balancer. ...
0
votes
2answers
200 views

Any load balancers using Chrome's JavaScript engine? [closed]

F5 has TCL which is horrific to program. A10 copied. Are there any programmable load balancers out there that are looking forward? Node.js seems to have blazed the trail and proven it works and ...
1
vote
2answers
789 views

Creating CNAME to delegated domain

We are trying to configure F5 to do load balancing on 4 sub domains similar to this article. For Example prod.wip.example.com. NS F5NS1.example.com. prod.wip.example.com. NS ...
1
vote
1answer
893 views

F5/BigIP rule to redirect affinity-bound users from INACTIVE pool node to other ACTIVE node

We have several server nodes set up for the end users of our system and because we don't use any kind of session replication in the app servers, F5 maintains affinity for users with the ACTIVE node ...
3
votes
1answer
1k views

NTLM, Kerberos and F5 switch issues

I'm supporting an IIS based application that is scaled out into web and application servers. Both web and applications run behind IIS. The application is NTLM capable when IIS is configured to ...
0
votes
1answer
619 views

Connection pooling through an F5 Big-Ip SQL VIP

I've got a Big-IP pool managing a couple SQL servers in an active/inactive rollover approach - there's only ever one in the pool at a time. Initially I was enabling/disabling the nodes in the pool, ...
2
votes
1answer
1k views

How-To Configure Weblogic, Agile PLM and an F5 LTM

Agile, Weblogic, and an F5 walk into a bar ... I've got this Agile PLM v 9.3 Running on WebLogic, two managed servers. An F5 BigIP LTM. We're upgrading from Agile v 9.2.1.4 running on OAS. The ...