The F5 BIG-IP product family comprises purpose-built, enterprise-grade hardware, software and virtual load balancers.

learn more… | top users | synonyms

10
votes
3answers
28k views

What is the downside to sticky sessions with load balancers?

We have a web farm of IIS7 machines which work great. In front of them is an F5 Big-IP hardware load balancer, also working fine :) Currently we're using an ASP.NET State Service to handle our ...
10
votes
2answers
1k views

Changing node IP addresses in F5 BigIP configuration

I need to re-ip about 600 servers, which is bad enough by itself, but I've automated the entire process except for one part: F5 configuration. In all the documentation I can find, there is nothing ...
7
votes
2answers
1k views

F5 Load Balancer Resends Request On Timeout

Let me preface this by saying I am not a systems administrator, I'm a programmer. Recently, our systems administrators installed F5 load balancers. Since then, I've noticed that any time a request ...
6
votes
2answers
5k views

F5 Big-IP, X-Forwarded-For and IIS Logs

I've got an F5 Big-IP that is mangaged by our hosting provider. It's dedicated to our private VLAN, etc. Works great :) We requested them to add in an X-Forwarded-For HTTP-Header field. They've done ...
5
votes
1answer
2k views

How can I disable and re-enable machines in a BIG-IP pool via ssh?

I can't seem to find any simple examples of disabling and re-enabling machines using the ssh interface. Can someone give me a brief example or a pointer to decent documentation?
4
votes
1answer
808 views

HAProxy: session stickiness triggered by response header possible?

I'm investigating HAProxy as a possible replacement for F5. F5 is capable of persisting a session based on a response header value: when HTTP_RESPONSE { set session [HTTP::header X-Session] if ...
4
votes
2answers
6k views

Load balancing with F5 Big-IP using only a single interface

I've been tasked with configuring our F5 Big-IP LTM. It's running 9.4.8. I've read through the docs a bit and I'm a little confused. It specifies that there are two default VLANs: internal and ...
3
votes
3answers
500 views

Is it generally better to compress content on the proxy server or the app server?

We're using an F5 for load balancing and SSL proxying. Behind it we're serving up java applications with Tomcat instances. These are fairly small applications - hundreds of concurrent users. I'd ...
3
votes
1answer
2k views

NTLM, Kerberos and F5 switch issues

I'm supporting an IIS based application that is scaled out into web and application servers. Both web and applications run behind IIS. The application is NTLM capable when IIS is configured to ...
3
votes
2answers
191 views

F5 rule deployment and source control

I'm a developer, our Ops team are currently doing F5 rules manually. And nothing is in a source control of any kind. I want to get to the point where there is a single file in source control, which ...
2
votes
2answers
6k views

F5 Big-IP iRule - HTTP Redirect

I have just started to work with F5's Big-IP and I have a question about iRules and HTTP redirects. We are moving to offload our SSL from our web servers and onto the F5, our application as it stands ...
2
votes
4answers
2k views

Testing strategies for f5 bigip

I am a developer who is used to being able to test and debug code. Occasionally I have to make changes to our load balancer configuration. As far as I can see, if I mess this up it could stop the ...
2
votes
2answers
128 views

configure F5 via Puppet

I have an Ubuntu PuppetMaster instance. I need to manage a F5 BIG-IP (v10.2.4) device. I'm following the directions for the Puppet Labs F5 module ( http://forge.puppetlabs.com/puppetlabs/f5 ). Is ...
2
votes
4answers
3k views

F5 Networks iRule/Tcl - Escaping UNICODE 6-character escape sequences so they are processed as and reinserted as the 6-character sequence?

We are trying to get an F5 BIG-IP LTM iRule working properly with SharePoint 2007 in an SSL termination role. This architecture offloads all of the SSL processing to the F5 and the F5 forwards ...
2
votes
1answer
138 views

Way to convert claims tokens to Kerberos that SP2010 accepts

I'm hoping there is an F5 way to do what is described in this article: http://blog.auth360.net/2010/12/03/the-triumvirate-uag-2010sp1-ad-fs-2-0-and-kerberos/ Users login to a mobile app using ...
2
votes
1answer
1k views

What's the best way to detect whether an incoming request is secure?

Is there a preferred method of detecting HTTP vs. HTTPS on an incoming request to an F5 load-balancer? We are attempting to detect secure vs. non-secure with an iRule and pass a corresponding header ...
2
votes
1answer
1k views

How-To Configure Weblogic, Agile PLM and an F5 LTM

Agile, Weblogic, and an F5 walk into a bar ... I've got this Agile PLM v 9.3 Running on WebLogic, two managed servers. An F5 BigIP LTM. We're upgrading from Agile v 9.2.1.4 running on OAS. The ...
2
votes
1answer
922 views

Proxy SSL from load balancer

A server admin who is setting up a load balancer asked me if I wanted to: Host SSL certs directly on web servers or, Proxy SSL from the load balancer I've only done the former implementation. Can ...
2
votes
1answer
250 views

complicated bonding and network question

I am not a network guy and would like to know how can I setup the below two configurations and their pros and cons: Networking component: -- WAN: Cisco 2970 * 1 Load Balancer: F5 switch 1600 * 2 ...
1
vote
2answers
2k views

F5 BIG_IP persistence iRules applied but not affecting selected member

I have a virtual server. I have 2 iRules (see below) assigned to it as resources. From the server log it looks like that the rules are running and they select the correct member from the pool after ...
1
vote
2answers
895 views

Is F5 Big-IP Routing by DNS Names (on one IP address and port) Possible?

In IIS, it is possible to listen for many DNS names on one IP address and port and then direct users to different websites based on the DNS name. Is the same thing possible with F5 Big-IP devices?
1
vote
2answers
2k views

F5 Packet filtering or iRules or both?

I need to set-up a custom filter for a virtual host that requires both ip address checks and URL check. Like so: _if_ _(_ http-request matches url _and_ ip is from certain host/net range _)_ ...
1
vote
2answers
5k views

Possible to redirect from HTTPS to HTTP behind load-balancer?

I have a basic ASP.NET application that sits behind an F5 load-balancer. Incoming SSL requests (over HTTPS) terminate at the load-balancer and all internal communication between the load-balancer and ...
1
vote
3answers
4k views

Big IP F5 Basics (show run/show conf/term len 0)

I've tried to find the basics in a Big IP manual but it seems to me the device is marketed towards GUI users only. Meanwhile I want to write a few scripts to automate tasks on the load balancer. ...
1
vote
1answer
111 views

F5 routes all REST requests from one client to same host

I have a rest webservice clustered behind an F5 using SSL Termination, SSL persistence and the balancing is "least connections". This service sees millions of messages per day. The vast majority of ...
1
vote
2answers
759 views

F5 Action on Service Down

Does anyone know how the F5 rebalances traffic when you configure "Action on Service Down" to None. i.e say there are active connections and your have updated the health check so that the server is ...
1
vote
1answer
1k views

F5/BigIP rule to redirect affinity-bound users from INACTIVE pool node to other ACTIVE node

We have several server nodes set up for the end users of our system and because we don't use any kind of session replication in the app servers, F5 maintains affinity for users with the ACTIVE node ...
1
vote
1answer
801 views

Big IP orphaned connections

Let me state up-front that I know just enough about networking at this level to be dangerous, so if I say something stupid, please be kind. I am using a Big IP load balancer in front of 3 Apache ...
1
vote
3answers
708 views

What are the licensing requirements for the Big IP F5 Load balancer?

I've seen older f5's on ebay for about $500 for a pair. I've heard they work great for load balancing, but I'm trying to figure out what the ongoing costs for them are. Does anyone know what kind of ...
1
vote
4answers
269 views

Long HTTP Get and Instant Response

We have an ASP.Net 3.5 Application on IIS7. On our preview server, it runs with almost instant gets and responses (~1 second from get to the page displaying). We have a production environment with 5 ...
1
vote
1answer
258 views

How a F5 can handle multiple virtual IP address on different network?

I'm confusing when design an F5 system. I have to using F5 with two networks subnet, for each network we need a virtual IP. The problem is F5 have only one default gateway so I only can choose one of ...
1
vote
1answer
905 views

F5 Big-IP and WSS WebSockets

We have a F5 Big-IP load balancer that handles the SSL, so the servers behind it get HTTPS rather than HTTP (SSL off loading). I don't have version handy, but in the login page I can see "Copyright ...
1
vote
1answer
522 views

F5 BigIP upgrade from 9.x to 10.x

Having a few difficulties upgrading a Big IP 3400 from 9.4.8 to any version 10.x image. The following are the versions I've tried: 10.1.0.3341.0 10.2.2.763.3 10.2.3.112.0 10.2.4.577.0 To upgrade ...
1
vote
1answer
428 views

WCF custom certificate validator not invoked in BIG-IP environment

My WCF service with a custom client certificate validator works fine in my non load balanced environment. When first deployed to BIG-IP environment there was a problem with it stripping SSL ...
1
vote
1answer
673 views

How can I version controll my F5 Big-IP LTM load balancer configs while allowing changes via iControl or the web interface

Currently we use F5 Big-IP LTMs (IP load balancers) in our environment for load balancing. We have an existing process for making changes to LTM configs and pushing them out. I'm trying to figure out ...
1
vote
1answer
90 views

Application Fail over not working in apache 2.2 web server configured with BIG IP (f5) load balancer

I am using Apache 2.2 in front of my JBOSS 5.2 application server in a cluster configuration . The two nodes of the cluster configuration resides on different host . This configuration is hosted on ...
1
vote
0answers
44 views

Configuring an F5 BIG-IP configuration on amazon EC2

I am a newbie to f5 BIG-IP. I want to configure an f5 BIG-IP instance to load balance 2 apache webservers under it. I am following the documentation in following link. But not clear how to route ...
1
vote
1answer
76 views

Server won't reply to POST request

I'm working on a WordPress site that's served by two lighttpd backends behind an F5 load balancer. Previously, the site was served by a single lighttpd server behind a nginx reverse proxy, and ...
1
vote
1answer
2k views

301 redirect Rule For Load Balance F5 BigIp

I have a load balancer F5 Big ip for my website. Currently, I am having 302 redirect in place; however, I wanted to apply 301 but dont know how. For example: My website (abc.com) when typed 302 ...
1
vote
2answers
1k views

Creating CNAME to delegated domain

We are trying to configure F5 to do load balancing on 4 sub domains similar to this article. For Example prod.wip.example.com. NS F5NS1.example.com. prod.wip.example.com. NS ...
0
votes
1answer
544 views

Predictive vs Least Connection Load Balancing Techniques

I have a windows based desktop application that communicates via TCP to the application servers. (windows 2003). No sticky sessions between client calls. We have exactly 2 servers to load balance and ...
0
votes
3answers
3k views

does bigIP support sticky session

Does BIG IP support sticky sessions? I have 2 apache's behind a Big IP box at my partner end. Need to know whether Big IP supports sticky sessions. My apache has the sticky session enabled. All ...
0
votes
3answers
1k views

F5 Networks VPN

I have a Windows 2008 server which needs to establish a VPN connection to a company that is using a product from F5 Networks. They sent a VPN URL, username and password to me for establishing the ...
0
votes
2answers
666 views

BigIP load balanced Rails 3 / Apache app not handling selective SSL correctly?

So here's the setup. I've got a Rails 3 application deployed to two servers, both running Apache2, both with identical VirtualHost configs, both operating on Passenger. There are a few routes in the ...
0
votes
1answer
111 views

F5 allow user to access iControl RESTful API

I'm trying to interact with an F5 load balancer using the REST api. I have verified that iControl is enabled, however when I try and run a command, I am told that I am unauthorized. curl -k -u ...
0
votes
1answer
42 views

What is the request flow in BIG-IP load balancers for NONE preference?

I would like to know to which member does the request will be first directed to when NONE preference is set in the BIG-IP load balancers. From this link, there are three ways to set the redundancy ...
0
votes
1answer
495 views

F5 Big-IP : pool monitors at member node level

BIG-IP 10.2.4 When configuring a pool, I can assign a monitor at pool-level. But I can also drill-down into each member node and assign a monitor. What is a use-case for assigning a health-monitor ...
0
votes
1answer
139 views

Any iControl API equivalent to 'b merge' in BIG-IP?

I want to deploy configurations (virtual server, pools) to my bigip server, based on the files which have same format as /config/bigip.conf. However, the iControl 'create' API for virtual server and ...
0
votes
1answer
1k views

BIG IP - HTTPS Health Monitor setup

I have a Web site that we have setup a health monitoring pages so we can take our servers in and out of the Big-IP as we see fit. Now we have just moved onto Big-IP and the issue I have hit is that ...
0
votes
2answers
227 views

Any load balancers using Chrome's JavaScript engine? [closed]

F5 has TCL which is horrific to program. A10 copied. Are there any programmable load balancers out there that are looking forward? Node.js seems to have blazed the trail and proven it works and ...