The F5 BIG-IP product family comprises purpose-built, enterprise-grade hardware, software and virtual load balancers.

learn more… | top users | synonyms (1)

1
vote
1answer
54 views

How a F5 can handle multiple virtual IP address on different network?

I'm confusing when design an F5 system. I have to using F5 with two networks subnet, for each network we need a virtual IP. The problem is F5 have only one default gateway so I only can choose one of ...
1
vote
1answer
2k views

301 redirect Rule For Load Balance F5 BigIp

I have a load balancer F5 Big ip for my website. Currently, I am having 302 redirect in place; however, I wanted to apply 301 but dont know how. For example: My website (abc.com) when typed 302 ...
9
votes
3answers
24k views

What is the downside to sticky sessions with load balancers?

We have a web farm of IIS7 machines which work great. In front of them is an F5 Big-IP hardware load balancer, also working fine :) Currently we're using an ASP.NET State Service to handle our ...
0
votes
1answer
23 views

What is the request flow in BIG-IP load balancers for NONE preference?

I would like to know to which member does the request will be first directed to when NONE preference is set in the BIG-IP load balancers. From this link, there are three ways to set the redundancy ...
-1
votes
1answer
100 views

F5 BigIP limiting the amount of sources able to connect to a virtual server

In an F5 bigIP LTM with sw version 11.4.1, is it possible to have multiple sources addresses for a virtual server? The objective is to limit the number of sources from where the virtual server can be ...
0
votes
0answers
34 views

Format of BIG-IP configuration file?

Anyone knows if the config file for BIG-IP load balancers follow an official format or is it something F5 specific?
0
votes
0answers
60 views

F5 routes all REST requests from one client to same host

I have a rest webservice clustered behind an F5 using SSL Termination, SSL persistence and the balancing is "least connections". This service sees millions of messages per day. The vast majority of ...
0
votes
0answers
126 views

Server A can see B, but B can't see A

I am setting up a network with a CentOS client, a CentOS server and a BIG-IP. The network looks like this: (client) < -- > (BIG-IP) < -- > (server) The client is on a 10.10.20.x ...
0
votes
0answers
98 views

Mounting two CIFS shares using a VIP

I have two CIFS shares on two different storage servers. I've created a VIP on an F5 node which sends all traffic to it's IP to a pool containing the two storage servers. It sends to one server and in ...
0
votes
0answers
560 views

Return F5 BigIP LTM pool member name in HTTP response header

I currently have several F5 BigIP LTM pools of Windows servers. There is a high level IIS config setting on each server that adds a header to identify the server from which the response came. ...
0
votes
0answers
81 views

Pool Members showing inactive

I am configuring my virtual test servers in F5 load balancer. As I am new to this I am referring a production environment to configure this one. While creating pool, I can see the pool as inactive. ...
1
vote
1answer
657 views

F5 Big-IP and WSS WebSockets

We have a F5 Big-IP load balancer that handles the SSL, so the servers behind it get HTTPS rather than HTTP (SSL off loading). I don't have version handy, but in the login page I can see "Copyright ...
2
votes
1answer
105 views

Way to convert claims tokens to Kerberos that SP2010 accepts

I'm hoping there is an F5 way to do what is described in this article: http://blog.auth360.net/2010/12/03/the-triumvirate-uag-2010sp1-ad-fs-2-0-and-kerberos/ Users login to a mobile app using ...
10
votes
1answer
721 views

Changing node IP addresses in F5 BigIP configuration

I need to re-ip about 600 servers, which is bad enough by itself, but I've automated the entire process except for one part: F5 configuration. In all the documentation I can find, there is nothing ...
0
votes
0answers
193 views

How to specify proxy server big ip f5?

We are attempting to setup a big ip f5 and need outbound internet traffic to flow through proxy servers. Is that possible?
0
votes
0answers
133 views

Is it possible to persist a session after a server as been removed from a load balanced server pool on an F5

We have a server farm hosted in a co-location data center, because of uptime SLA's in our contract we have zero access to the F5 Load Balancer. I am curious if the following is possible to achieve. ...
7
votes
1answer
1k views

F5 Load Balancer Resends Request On Timeout

Let me preface this by saying I am not a systems administrator, I'm a programmer. Recently, our systems administrators installed F5 load balancers. Since then, I've noticed that any time a request ...
5
votes
1answer
2k views

How can I disable and re-enable machines in a BIG-IP pool via ssh?

I can't seem to find any simple examples of disabling and re-enabling machines using the ssh interface. Can someone give me a brief example or a pointer to decent documentation?
0
votes
1answer
99 views

configure F5 via Puppet

I have an Ubuntu PuppetMaster instance. I need to manage a F5 BIG-IP (v10.2.4) device. I'm following the directions for the Puppet Labs F5 module ( http://forge.puppetlabs.com/puppetlabs/f5 ). Is ...
0
votes
1answer
653 views

F5 Big-IP : iRule optimization of nested switch

F5 BIG-IP 10.2.4 My iRule needs to exact-match on host and wild-card match on path. when HTTP_REQUEST { switch [string tolower [HTTP::host]] { "internal.mycompany.com" { switch -glob ...
0
votes
1answer
1k views

Problem while adding a route to F5 BigIp version 9

I want to add a route for outbound traffic from BigIp v9. I have WANem machine configured which simulates the network traffic and want to add this as a router between BigIp9 virtual server and Client. ...
0
votes
1answer
365 views

F5 Big-IP : pool monitors at member node level

BIG-IP 10.2.4 When configuring a pool, I can assign a monitor at pool-level. But I can also drill-down into each member node and assign a monitor. What is a use-case for assigning a health-monitor ...
1
vote
2answers
4k views

Big IP F5 Basics (show run/show conf/term len 0)

I've tried to find the basics in a Big IP manual but it seems to me the device is marketed towards GUI users only. Meanwhile I want to write a few scripts to automate tasks on the load balancer. ...
0
votes
1answer
120 views

Any iControl API equivalent to 'b merge' in BIG-IP?

I want to deploy configurations (virtual server, pools) to my bigip server, based on the files which have same format as /config/bigip.conf. However, the iControl 'create' API for virtual server and ...
0
votes
2answers
190 views

Big IP F5 outbound HTTP issues

We've tried upgrading from 9.x to 10.2 on our F5 Big IP 3400 and everything went over fine apart from one thing. We're unable to establish any outbound HTTP (80) connections from any servers that are ...
2
votes
4answers
2k views

Testing strategies for f5 bigip

I am a developer who is used to being able to test and debug code. Occasionally I have to make changes to our load balancer configuration. As far as I can see, if I mess this up it could stop the ...
2
votes
4answers
3k views

F5 Networks iRule/Tcl - Escaping UNICODE 6-character escape sequences so they are processed as and reinserted as the 6-character sequence?

We are trying to get an F5 BIG-IP LTM iRule working properly with SharePoint 2007 in an SSL termination role. This architecture offloads all of the SSL processing to the F5 and the F5 forwards ...
3
votes
3answers
379 views

Is it generally better to compress content on the proxy server or the app server?

We're using an F5 for load balancing and SSL proxying. Behind it we're serving up java applications with Tomcat instances. These are fairly small applications - hundreds of concurrent users. I'd ...
0
votes
1answer
155 views

HTTP-CLASS-Redirecting traffic-F5

Can we redirect https traffic to a particular real server using http-class in F5? i.e whether http-class works with both http and https traffic.?
1
vote
2answers
602 views

F5 Action on Service Down

Does anyone know how the F5 rebalances traffic when you configure "Action on Service Down" to None. i.e say there are active connections and your have updated the health check so that the server is ...
0
votes
1answer
188 views

F5 authentication using kerberos keytab

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
1
vote
2answers
1k views

F5 Packet filtering or iRules or both?

I need to set-up a custom filter for a virtual host that requires both ip address checks and URL check. Like so: _if_ _(_ http-request matches url _and_ ip is from certain host/net range _)_ ...
0
votes
3answers
3k views

does bigIP support sticky session

Does BIG IP support sticky sessions? I have 2 apache's behind a Big IP box at my partner end. Need to know whether Big IP supports sticky sessions. My apache has the sticky session enabled. All ...
0
votes
0answers
665 views

apache2 Redirect permanent and ProxyPass confusion

I am trying to setup an apache2 in front of a JBoss application. There are 2 servers with this setup. There is a hardware load balancer in front of the 2 apache2. The setup looks something like: ...
1
vote
1answer
69 views

Server won't reply to POST request

I'm working on a WordPress site that's served by two lighttpd backends behind an F5 load balancer. Previously, the site was served by a single lighttpd server behind a nginx reverse proxy, and ...
6
votes
2answers
5k views

F5 Big-IP, X-Forwarded-For and IIS Logs

I've got an F5 Big-IP that is mangaged by our hosting provider. It's dedicated to our private VLAN, etc. Works great :) We requested them to add in an X-Forwarded-For HTTP-Header field. They've done ...
0
votes
1answer
459 views

F5 LTM 10.2 and MSSQL 08R2

We have a mirrored SQL server setup with a pair of LTM's holding the mirror VIP. We're trying to setup a health monitor that runs a query against both servers in the mirror and directs traffic to the ...
2
votes
1answer
1k views

How-To Configure Weblogic, Agile PLM and an F5 LTM

Agile, Weblogic, and an F5 walk into a bar ... I've got this Agile PLM v 9.3 Running on WebLogic, two managed servers. An F5 BigIP LTM. We're upgrading from Agile v 9.2.1.4 running on OAS. The ...
1
vote
1answer
2k views

F5 BIG_IP persistence iRules applied but not affecting selected member

I have a virtual server. I have 2 iRules (see below) assigned to it as resources. From the server log it looks like that the rules are running and they select the correct member from the pool after ...
1
vote
1answer
447 views

F5 BigIP upgrade from 9.x to 10.x

Having a few difficulties upgrading a Big IP 3400 from 9.4.8 to any version 10.x image. The following are the versions I've tried: 10.1.0.3341.0 10.2.2.763.3 10.2.3.112.0 10.2.4.577.0 To upgrade ...
1
vote
1answer
388 views

WCF custom certificate validator not invoked in BIG-IP environment

My WCF service with a custom client certificate validator works fine in my non load balanced environment. When first deployed to BIG-IP environment there was a problem with it stripping SSL ...
0
votes
1answer
395 views

Predictive vs Least Connection Load Balancing Techniques

I have a windows based desktop application that communicates via TCP to the application servers. (windows 2003). No sticky sessions between client calls. We have exactly 2 servers to load balance and ...
3
votes
1answer
1k views

NTLM, Kerberos and F5 switch issues

I'm supporting an IIS based application that is scaled out into web and application servers. Both web and applications run behind IIS. The application is NTLM capable when IIS is configured to ...
4
votes
1answer
678 views

HAProxy: session stickiness triggered by response header possible?

I'm investigating HAProxy as a possible replacement for F5. F5 is capable of persisting a session based on a response header value: when HTTP_RESPONSE { set session [HTTP::header X-Session] if ...
3
votes
2answers
184 views

F5 rule deployment and source control

I'm a developer, our Ops team are currently doing F5 rules manually. And nothing is in a source control of any kind. I want to get to the point where there is a single file in source control, which ...
1
vote
1answer
1k views

F5/BigIP rule to redirect affinity-bound users from INACTIVE pool node to other ACTIVE node

We have several server nodes set up for the end users of our system and because we don't use any kind of session replication in the app servers, F5 maintains affinity for users with the ACTIVE node ...
0
votes
1answer
982 views

BIG IP - HTTPS Health Monitor setup

I have a Web site that we have setup a health monitoring pages so we can take our servers in and out of the Big-IP as we see fit. Now we have just moved onto Big-IP and the issue I have hit is that ...
1
vote
2answers
4k views

Possible to redirect from HTTPS to HTTP behind load-balancer?

I have a basic ASP.NET application that sits behind an F5 load-balancer. Incoming SSL requests (over HTTPS) terminate at the load-balancer and all internal communication between the load-balancer and ...
2
votes
1answer
892 views

What's the best way to detect whether an incoming request is secure?

Is there a preferred method of detecting HTTP vs. HTTPS on an incoming request to an F5 load-balancer? We are attempting to detect secure vs. non-secure with an iRule and pass a corresponding header ...
2
votes
2answers
5k views

F5 Big-IP iRule - HTTP Redirect

I have just started to work with F5's Big-IP and I have a question about iRules and HTTP redirects. We are moving to offload our SSL from our web servers and onto the F5, our application as it stands ...