The F5 BIG-IP product family comprises purpose-built, enterprise-grade hardware, software and virtual load balancers.

learn more… | top users | synonyms (1)

-1
votes
1answer
66 views

F5 BigIP limiting the amount of sources able to connect to a virtual server

In an F5 bigIP LTM with sw version 11.4.1, is it possible to have multiple sources addresses for a virtual server? The objective is to limit the number of sources from where the virtual server can be ...
0
votes
0answers
20 views

Format of BIG-IP configuration file?

Anyone knows if the config file for BIG-IP load balancers follow an official format or is it something F5 specific?
1
vote
1answer
2k views

301 redirect Rule For Load Balance F5 BigIp

I have a load balancer F5 Big ip for my website. Currently, I am having 302 redirect in place; however, I wanted to apply 301 but dont know how. For example: My website (abc.com) when typed 302 ...
0
votes
0answers
40 views

F5 routes all REST requests from one client to same host

I have a rest webservice clustered behind an F5 using SSL Termination, SSL persistence and the balancing is "least connections". This service sees millions of messages per day. The vast majority of ...
0
votes
0answers
93 views

Server A can see B, but B can't see A

I am setting up a network with a CentOS client, a CentOS server and a BIG-IP. The network looks like this: (client) < -- > (BIG-IP) < -- > (server) The client is on a 10.10.20.x ...
0
votes
0answers
78 views

Mounting two CIFS shares using a VIP

I have two CIFS shares on two different storage servers. I've created a VIP on an F5 node which sends all traffic to it's IP to a pool containing the two storage servers. It sends to one server and in ...
0
votes
0answers
461 views

Return F5 BigIP LTM pool member name in HTTP response header

I currently have several F5 BigIP LTM pools of Windows servers. There is a high level IIS config setting on each server that adds a header to identify the server from which the response came. ...
0
votes
0answers
68 views

Pool Members showing inactive

I am configuring my virtual test servers in F5 load balancer. As I am new to this I am referring a production environment to configure this one. While creating pool, I can see the pool as inactive. ...
1
vote
1answer
577 views

F5 Big-IP and WSS WebSockets

We have a F5 Big-IP load balancer that handles the SSL, so the servers behind it get HTTPS rather than HTTP (SSL off loading). I don't have version handy, but in the login page I can see "Copyright ...
2
votes
1answer
96 views

Way to convert claims tokens to Kerberos that SP2010 accepts

I'm hoping there is an F5 way to do what is described in this article: http://blog.auth360.net/2010/12/03/the-triumvirate-uag-2010sp1-ad-fs-2-0-and-kerberos/ Users login to a mobile app using ...
10
votes
1answer
625 views

Changing node IP addresses in F5 BigIP configuration

I need to re-ip about 600 servers, which is bad enough by itself, but I've automated the entire process except for one part: F5 configuration. In all the documentation I can find, there is nothing ...
0
votes
0answers
59 views

Configuration of management interface on management network router

I have an F5 LTM that is being used as an IP router in addition to its regular load balancing duties. One of the networks that it's routing is our management network. But it also has a dedicated ...
0
votes
0answers
182 views

How to specify proxy server big ip f5?

We are attempting to setup a big ip f5 and need outbound internet traffic to flow through proxy servers. Is that possible?
0
votes
0answers
123 views

Is it possible to persist a session after a server as been removed from a load balanced server pool on an F5

We have a server farm hosted in a co-location data center, because of uptime SLA's in our contract we have zero access to the F5 Load Balancer. I am curious if the following is possible to achieve. ...
7
votes
1answer
900 views

F5 Load Balancer Resends Request On Timeout

Let me preface this by saying I am not a systems administrator, I'm a programmer. Recently, our systems administrators installed F5 load balancers. Since then, I've noticed that any time a request ...
5
votes
1answer
2k views

How can I disable and re-enable machines in a BIG-IP pool via ssh?

I can't seem to find any simple examples of disabling and re-enabling machines using the ssh interface. Can someone give me a brief example or a pointer to decent documentation?
0
votes
1answer
96 views

configure F5 via Puppet

I have an Ubuntu PuppetMaster instance. I need to manage a F5 BIG-IP (v10.2.4) device. I'm following the directions for the Puppet Labs F5 module ( http://forge.puppetlabs.com/puppetlabs/f5 ). Is ...
0
votes
1answer
587 views

F5 Big-IP : iRule optimization of nested switch

F5 BIG-IP 10.2.4 My iRule needs to exact-match on host and wild-card match on path. when HTTP_REQUEST { switch [string tolower [HTTP::host]] { "internal.mycompany.com" { switch -glob ...
0
votes
1answer
1k views

Problem while adding a route to F5 BigIp version 9

I want to add a route for outbound traffic from BigIp v9. I have WANem machine configured which simulates the network traffic and want to add this as a router between BigIp9 virtual server and Client. ...
0
votes
1answer
321 views

F5 Big-IP : pool monitors at member node level

BIG-IP 10.2.4 When configuring a pool, I can assign a monitor at pool-level. But I can also drill-down into each member node and assign a monitor. What is a use-case for assigning a health-monitor ...
1
vote
2answers
3k views

Big IP F5 Basics (show run/show conf/term len 0)

I've tried to find the basics in a Big IP manual but it seems to me the device is marketed towards GUI users only. Meanwhile I want to write a few scripts to automate tasks on the load balancer. ...
0
votes
1answer
104 views

Any iControl API equivalent to 'b merge' in BIG-IP?

I want to deploy configurations (virtual server, pools) to my bigip server, based on the files which have same format as /config/bigip.conf. However, the iControl 'create' API for virtual server and ...
0
votes
2answers
188 views

Big IP F5 outbound HTTP issues

We've tried upgrading from 9.x to 10.2 on our F5 Big IP 3400 and everything went over fine apart from one thing. We're unable to establish any outbound HTTP (80) connections from any servers that are ...
2
votes
4answers
2k views

Testing strategies for f5 bigip

I am a developer who is used to being able to test and debug code. Occasionally I have to make changes to our load balancer configuration. As far as I can see, if I mess this up it could stop the ...
2
votes
4answers
3k views

F5 Networks iRule/Tcl - Escaping UNICODE 6-character escape sequences so they are processed as and reinserted as the 6-character sequence?

We are trying to get an F5 BIG-IP LTM iRule working properly with SharePoint 2007 in an SSL termination role. This architecture offloads all of the SSL processing to the F5 and the F5 forwards ...
3
votes
3answers
346 views

Is it generally better to compress content on the proxy server or the app server?

We're using an F5 for load balancing and SSL proxying. Behind it we're serving up java applications with Tomcat instances. These are fairly small applications - hundreds of concurrent users. I'd ...
0
votes
1answer
151 views

HTTP-CLASS-Redirecting traffic-F5

Can we redirect https traffic to a particular real server using http-class in F5? i.e whether http-class works with both http and https traffic.?
1
vote
2answers
549 views

F5 Action on Service Down

Does anyone know how the F5 rebalances traffic when you configure "Action on Service Down" to None. i.e say there are active connections and your have updated the health check so that the server is ...
0
votes
1answer
176 views

F5 authentication using kerberos keytab

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
1
vote
2answers
1k views

F5 Packet filtering or iRules or both?

I need to set-up a custom filter for a virtual host that requires both ip address checks and URL check. Like so: _if_ _(_ http-request matches url _and_ ip is from certain host/net range _)_ ...
0
votes
3answers
2k views

does bigIP support sticky session

Does BIG IP support sticky sessions? I have 2 apache's behind a Big IP box at my partner end. Need to know whether Big IP supports sticky sessions. My apache has the sticky session enabled. All ...
0
votes
0answers
632 views

apache2 Redirect permanent and ProxyPass confusion

I am trying to setup an apache2 in front of a JBoss application. There are 2 servers with this setup. There is a hardware load balancer in front of the 2 apache2. The setup looks something like: ...
1
vote
1answer
67 views

Server won't reply to POST request

I'm working on a WordPress site that's served by two lighttpd backends behind an F5 load balancer. Previously, the site was served by a single lighttpd server behind a nginx reverse proxy, and ...
6
votes
2answers
5k views

F5 Big-IP, X-Forwarded-For and IIS Logs

I've got an F5 Big-IP that is mangaged by our hosting provider. It's dedicated to our private VLAN, etc. Works great :) We requested them to add in an X-Forwarded-For HTTP-Header field. They've done ...
0
votes
1answer
437 views

F5 LTM 10.2 and MSSQL 08R2

We have a mirrored SQL server setup with a pair of LTM's holding the mirror VIP. We're trying to setup a health monitor that runs a query against both servers in the mirror and directs traffic to the ...
2
votes
1answer
1k views

How-To Configure Weblogic, Agile PLM and an F5 LTM

Agile, Weblogic, and an F5 walk into a bar ... I've got this Agile PLM v 9.3 Running on WebLogic, two managed servers. An F5 BigIP LTM. We're upgrading from Agile v 9.2.1.4 running on OAS. The ...
1
vote
1answer
1k views

F5 BIG_IP persistence iRules applied but not affecting selected member

I have a virtual server. I have 2 iRules (see below) assigned to it as resources. From the server log it looks like that the rules are running and they select the correct member from the pool after ...
1
vote
1answer
409 views

F5 BigIP upgrade from 9.x to 10.x

Having a few difficulties upgrading a Big IP 3400 from 9.4.8 to any version 10.x image. The following are the versions I've tried: 10.1.0.3341.0 10.2.2.763.3 10.2.3.112.0 10.2.4.577.0 To upgrade ...
1
vote
1answer
368 views

WCF custom certificate validator not invoked in BIG-IP environment

My WCF service with a custom client certificate validator works fine in my non load balanced environment. When first deployed to BIG-IP environment there was a problem with it stripping SSL ...
0
votes
1answer
338 views

Predictive vs Least Connection Load Balancing Techniques

I have a windows based desktop application that communicates via TCP to the application servers. (windows 2003). No sticky sessions between client calls. We have exactly 2 servers to load balance and ...
3
votes
1answer
1k views

NTLM, Kerberos and F5 switch issues

I'm supporting an IIS based application that is scaled out into web and application servers. Both web and applications run behind IIS. The application is NTLM capable when IIS is configured to ...
4
votes
1answer
621 views

HAProxy: session stickiness triggered by response header possible?

I'm investigating HAProxy as a possible replacement for F5. F5 is capable of persisting a session based on a response header value: when HTTP_RESPONSE { set session [HTTP::header X-Session] if ...
3
votes
2answers
183 views

F5 rule deployment and source control

I'm a developer, our Ops team are currently doing F5 rules manually. And nothing is in a source control of any kind. I want to get to the point where there is a single file in source control, which ...
1
vote
1answer
1k views

F5/BigIP rule to redirect affinity-bound users from INACTIVE pool node to other ACTIVE node

We have several server nodes set up for the end users of our system and because we don't use any kind of session replication in the app servers, F5 maintains affinity for users with the ACTIVE node ...
0
votes
1answer
909 views

BIG IP - HTTPS Health Monitor setup

I have a Web site that we have setup a health monitoring pages so we can take our servers in and out of the Big-IP as we see fit. Now we have just moved onto Big-IP and the issue I have hit is that ...
1
vote
2answers
3k views

Possible to redirect from HTTPS to HTTP behind load-balancer?

I have a basic ASP.NET application that sits behind an F5 load-balancer. Incoming SSL requests (over HTTPS) terminate at the load-balancer and all internal communication between the load-balancer and ...
2
votes
1answer
841 views

What's the best way to detect whether an incoming request is secure?

Is there a preferred method of detecting HTTP vs. HTTPS on an incoming request to an F5 load-balancer? We are attempting to detect secure vs. non-secure with an iRule and pass a corresponding header ...
2
votes
2answers
5k views

F5 Big-IP iRule - HTTP Redirect

I have just started to work with F5's Big-IP and I have a question about iRules and HTTP redirects. We are moving to offload our SSL from our web servers and onto the F5, our application as it stands ...
0
votes
1answer
684 views

Connection pooling through an F5 Big-Ip SQL VIP

I've got a Big-IP pool managing a couple SQL servers in an active/inactive rollover approach - there's only ever one in the pool at a time. Initially I was enabling/disabling the nodes in the pool, ...
0
votes
2answers
846 views

F5 Networks VPN

I have a Windows 2008 server which needs to establish a VPN connection to a company that is using a product from F5 Networks. They sent a VPN URL, username and password to me for establishing the ...