F5 LTM VE – Configuring iRules (CLI)

CLI (in my opinion) is the fastest and easiest way to configure a lot of these items if you are comfortable with it. Lets look at configuring iRules.

Create the HTTP_MOBILE_POOLcreate ltm pool HTTP_MOBILE_POOL load-balancing-mode round-robin members add {192.168.1.41:81 192.168.1.42:81 192.168.1.43:81}

Create the iRule DETECT_DEVICE_TYPEEnter this command from tmsh to enter the editor…
edit ltm rule DETECT_DEVICE_TYPE
Then you should see something like this…



Build your iRule within the curly brackets of the ‘modify’ statement. When you are done it should look like…


It’s VI so do your write quit to save. When you get back to tmsh it will prompt you again to make sure you want to save it. When you try to do so it will also hit you with any syntax errors you have and make you fix them before saving.

Modify the Virtual Server to specify the iRulemodify ltm virtual HTTP_TEST rules {DETECT_DEVICE_TYPE}

Add HTTP monitors to both pools (Just for fun)modify ltm pool HTTP_POOL monitor http
modify ltm pool HTTP_MOBILE_POOL monitor http

 

F5 Buys Layer 7 SDN Specialist

 

F5 Networks Inc. is the latest company to acquire a software-defined networking (SDN) startup, announcing Monday morning that it's picked up LineRate Systems Inc. for an undisclosed price.

Based near Boulder, Colo., LineRate offers software for Layer 7 SDN. That is, LineRate Proxy software provides a programmable way to handle traffic at the application layer; the company's website lists policy-based traffic management as an example.

 

Unlike some SDN acquisition targets, LineRate isn't brand new. The company is four years old and claims PhotoBucket as a customer, as GigaOm reported last year. Ironically, the avoidance of "expensive special-purpose F5 machines" was an advantage to using LineRate, according to the story.

 

Why this matters

The SDN conversation has broadened beyond routing and switching to include Layers 4 through 7. Startup Embrane Inc. is trying to specialize in that area, for instance.

 

But F5 believes that those layers can't be handled in the same way as Layers 2 and 3, because at the application layer, the network has to keep track of the state of a flow.

 

As Lori MacVittie, F5 senior technical marketing manager, explains in her Monday blog posting, a Layer 7 operation might need to forward most packets to a centralized controller. OpenFlow (as an example of a Layer 2 SDN protocol) assumes only very few packets will need to be handled by the controller.

 

So, F5 believes a different structure is needed for Layer 7. The company seems to think LineRate has at least part of the answer.

 

F5 Set to Launch Application Delivery Firewall

 

F5 Networks is currently gearing up for a major product refresh, set to be formally announced on November 15th. F5's CEO John McAdam revealed a few details of what's coming, during his company's fourth quarter earnings call, late Wednesday.

 

For the fourth quarter of 2012, F5 reported revenue of $362.6 million which is a 15 percent year-over-year gain. All told for the full fiscal 2012 year, F5 reported revenue growth of 20 percent with revenues totaling $1.38 billion. Looking forward the company remains optimistic, providing first quarter fiscal 2013 guidance for revenue in the range of 363 million to 370 million.

 

"During the next two quarters, we will be delivering our largest appliance refresh in four years," F5 CEO, John McAdam said during the company's earnings call. "Our next release of TMOS includes a number of new security and service provider offerings as well as products to enable cloud architectures."

 

TMOS is the core operating system that powers F5's lineup of BIG-IP and Viprion application delivery controllers(ADCs). The new TMOS update will be going beyond traditional ADC capability and is set to integrate what McAdam referred to as, the industry's first application delivery firewall (ADF). The new ADF will include Level 3 through 7 security as well as data loss prevention technology.

 

"ADF provides performance metrics clearly superior to those offered by our competitors," McAdam said.

 

Firewall technology is not something that is entirely new to F5. At the beginning of 2012, F5 announced that it's lineup of ADCs were certified by testing vendor ICSA for being usable as firewalls.

 

Manny Rivelo, Executive Vice President of Security and Strategic Solutions at F5 noted that putting a load balancer inside a firewall is a complicated issue.

 

"You have to have the right platforms and the foundation and what we've done is, we've built the right platform starting with some availability services and we've put services in it, so we think we have a leadership position," Rivelo said. "The data will prove that out when we announce it later in this year."

Hardware

The new TMOS update will be complemented by a virtualization and hardware updates as well.

"We will also be delivering the industry's broadest range of Hyper-V support of world-class performance levels," McAdam said.

 

From a hardware perspective, F5 will also be announcing new platforms that extend the company's current product families. One of the new platforms is an eight-slot version of the VIPRION. The eight-slot VIPRION is set to double the performance of VIPRION 4480, that was first announced in April of this year. The VIPRION 4480 can deliver up to 320 Gbps of Layer 4 throughput.

 

"The pipeline for these products is building steadily and we're seeing a fairly large uptake in RFP and proof-of-concept request," McAdam said. "F5 has the opportunity to be a leader in this area which will not only provide growth opportunities over the next three years, but should also significantly enhance our position as a strategic supplier to global service providers. "