F5-iRule介绍.ppt

1、F5 iRule介绍,L4和L7交换的本质区别,L2,Payload,L3,L4,L7,Header,Full Payload,对不定址，不定长的特征码进行的交换是L7交换的特征,对L7交换特征的提取-iRule,What is an iRule?,iRule是一种脚本语言工具 它的语法是基于TCL语言的 大部分TCL语言的功能都被支持 同时还有很多iRule的扩展功能 它能帮你实现许多扩展功能 当你在CLI/GUI介面无法找到对应的命令/菜单 请相信iRule！,iRules的组成元素,iRules是基于事件驱动(Event-Driven)的 由LTM系统触发你在iRules中指定/期望的事

2、件 iRules是由以下的基本元素构成： 事件声明 操作符 iRules命令,iRules的基本格式,事件声明 表达式 iRules 命令 ,when CLIENT_ACCEPTED if IP:addr IP:remote_addr equals “/24” discard ,iRule的创建和管理（1）,iRule的创建和管理（2）,Datagroup的创建（1）,Datagroup的创建（2）,iRule Editor,iRule的引用（1） -新建virtual server,iRule的引用（2）-已有virtual server,iRule案例（1）,when

3、 HTTP_REQUEST if HTTP:uri starts_with /csp/dwr/ and HTTP:uri ends_with .js pool csp6_cache_pool elseif HTTP:uri starts_with /csp/js/ pool csp6_cache_pool elseif HTTP:uri starts_with /csp/resources/ pool csp6_cache_pool elseif HTTP:uri starts_with /csp_help/ pool csp6_cache_pool elseif HTTP:uri start

4、s_with /csp/esales/ pool csp6_esales_pool else pool csp6_professional_pool ,iRule例子（2）,when HTTP_REQUEST if HTTP:header exists x-up-calling-line-id persist uie HTTP:header values x-up-calling-line-id # log local0. the phonenumber is-HTTP:header values x-up-calling-line-id- 根据http数据包中的手机号码做会话保持,iRule

5、例子（3）,when HTTP_REQUEST if matchclass HTTP:uri ends_with $:class_end pool pool_gateway log local0. the uri is $HTTP:uri, match uri class“ elseif matchclass HTTP:host contains $:class_domain pool pool_gateway log local0. the domain name is $HTTP:host, match class_domain“ else pool CSS-W3log local0. t

6、he uri is $HTTP:uri, use cache $: 全局变量，在v10在不要再采用，而是直接把$:去掉,class class_domain class class_end .aspx .cfm .cgi .jsp .php .phtml .shtml“ ,iRule案例（4）,when CLIENT_ACCEPTED log local0. the client is IP:remote_addr, the server is IP:local_addr if (IP:addr IP:local_addr equals /23 | IP:addr IP:

7、local_addr equals /23 | IP:addr IP:local_addr equals /23) path=/; domain=%s $ckname $ckvalue . HTTP:respond 302 Location Set-Cookie $cookie ,when HTTP_RESPONSE if HTTP:status = 302 foreach aCookieName HTTP:cookie names set currentCookie $aCookieNam

8、e=HTTP:cookie value $aCookieName set cookies $cookiesrnSet-Cookie: $currentCookie HTTP:respond 200 content Forbidden Redirect From remote ServerThe server is trying to redirect the client to an external site, but it is forbidden Set-Cookie $cookies ,TMOSCMD:HTTP,iRules事件,如何声明事件 when body An example:

9、 when CLIENT_ACCEPTED if IP:addr IP:remote_addr equals 0 pool my_pool1 ,iRules事件,事件类型 Global Events IP Events TCP/UDP Events HTTP/SSL/DNS/Auth/Cache Events Others (F5还在不断扩充支持的事件类型) SIP/XML/RTSP, etc,TMOS Events 祥解 1,第一部分 全局事件 TCP/IP事件 HTTP,事件清单 1,事件清单 2,事件：Global,事件：Global:LB_FAILED,事件：IP/TC

10、P,事件：TCP,when SERVER_DATA TCP:release TCP:collect log local0. in SERVER_DATA, calling TCP:notify response to trigger USER_RESPONSE event TCP:notify response when USER_RESPONSE log local0. in USER_RESPONSE ,事件：HTTP,Advanced Persistence with iRules,UIE - Universal Inspection Engine Hash,iRules命令:Global:persist,iRules命令:Global:persist,iRules命令:Global:persist,iRules命令:Global:session,iRules命令:persist&session,when HTTP_REQUEST set lookup li