F5-iRule介紹.ppt

1、F5 iRule介紹,L4和L7交換的本質區(qū)別,L2,Payload,L3,L4,L7,Header,Full Payload,對不定址，不定長的特征碼進行的交換是L7交換的特征,對L7交換特征的提取-iRule,What is an iRule?,iRule是一種腳本語言工具 它的語法是基于TCL語言的 大部分TCL語言的功能都被支持 同時還有很多iRule的擴展功能 它能幫你實現(xiàn)許多擴展功能 當你在CLI/GUI介面無法找到對應的命令/菜單 請相信iRule！,iRules的組成元素,iRules是基于事件驅動(Event-Driven)的 由LTM系統(tǒng)觸發(fā)你在iRules中指定/期望的事

2、件 iRules是由以下的基本元素構成： 事件聲明 操作符 iRules命令,iRules的基本格式,事件聲明 表達式 iRules 命令 ,when CLIENT_ACCEPTED if IP:addr IP:remote_addr equals “/24” discard ,iRule的創(chuàng)建和管理（1）,iRule的創(chuàng)建和管理（2）,Datagroup的創(chuàng)建（1）,Datagroup的創(chuàng)建（2）,iRule Editor,iRule的引用（1） -新建virtual server,iRule的引用（2）-已有virtual server,iRule案例（1）,when

3、 HTTP_REQUEST if HTTP:uri starts_with /csp/dwr/ and HTTP:uri ends_with .js pool csp6_cache_pool elseif HTTP:uri starts_with /csp/js/ pool csp6_cache_pool elseif HTTP:uri starts_with /csp/resources/ pool csp6_cache_pool elseif HTTP:uri starts_with /csp_help/ pool csp6_cache_pool elseif HTTP:uri start

4、s_with /csp/esales/ pool csp6_esales_pool else pool csp6_professional_pool ,iRule例子（2）,when HTTP_REQUEST if HTTP:header exists x-up-calling-line-id persist uie HTTP:header values x-up-calling-line-id # log local0. the phonenumber is-HTTP:header values x-up-calling-line-id- 根據(jù)http數(shù)據(jù)包中的手機號碼做會話保持,iRule

5、例子（3）,when HTTP_REQUEST if matchclass HTTP:uri ends_with $:class_end pool pool_gateway log local0. the uri is $HTTP:uri, match uri class“ elseif matchclass HTTP:host contains $:class_domain pool pool_gateway log local0. the domain name is $HTTP:host, match class_domain“ else pool CSS-W3log local0. t

6、he uri is $HTTP:uri, use cache $: 全局變量，在v10在不要再采用，而是直接把$:去掉,class class_domain class class_end .aspx .cfm .cgi .jsp .php .phtml .shtml“ ,iRule案例（4）,when CLIENT_ACCEPTED log local0. the client is IP:remote_addr, the server is IP:local_addr if (IP:addr IP:local_addr equals /23 | IP:addr IP:

7、local_addr equals /23 | IP:addr IP:local_addr equals /23) path=/; domain=%s $ckname $ckvalue . HTTP:respond 302 Location Set-Cookie $cookie ,when HTTP_RESPONSE if HTTP:status = 302 foreach aCookieName HTTP:cookie names set currentCookie $aCookieNam

8、e=HTTP:cookie value $aCookieName set cookies $cookiesrnSet-Cookie: $currentCookie HTTP:respond 200 content Forbidden Redirect From remote ServerThe server is trying to redirect the client to an external site, but it is forbidden Set-Cookie $cookies ,TMOSCMD:HTTP,iRules事件,如何聲明事件 when body An example:

9、 when CLIENT_ACCEPTED if IP:addr IP:remote_addr equals 0 pool my_pool1 ,iRules事件,事件類型 Global Events IP Events TCP/UDP Events HTTP/SSL/DNS/Auth/Cache Events Others (F5還在不斷擴充支持的事件類型) SIP/XML/RTSP, etc,TMOS Events 祥解 1,第一部分 全局事件 TCP/IP事件 HTTP,事件清單 1,事件清單 2,事件：Global,事件：Global:LB_FAILED,事件：IP/TC

10、P,事件：TCP,when SERVER_DATA TCP:release TCP:collect log local0. in SERVER_DATA, calling TCP:notify response to trigger USER_RESPONSE event TCP:notify response when USER_RESPONSE log local0. in USER_RESPONSE ,事件：HTTP,Advanced Persistence with iRules,UIE - Universal Inspection Engine Hash,iRules命令:Global:persist,iRules命令:Global:persist,iRules命令:Global:persist,iRules命令:Global:session,iRules命令:persist&session,when HTTP_REQUEST set lookup li