2/8/2015 [Link]
pt/
dl/download/9732dc58
-1104-48e0-8c20-
32722ca82a1d/Start.w
[Link]-
[Link]:text/html;charse
t=utf-
8,%3Cpre%20style%3D%
22color%3A%20rgb(0%2
C%200%2C%200)%3B%
20font-
style%3A%20normal%3B
%20font-variant%3A… 5/7
iRules
Syntaxwhen
CLIENT_ACCEP
TED
{ if {[[IP::remo
te_address] sta
rts_with "10."]
} { pool ten_po
ol } else { pool
customer_pool
}}iRule based
on a
Headerwhen
HTTP_REQUEST
{ switch [string
tolower [substr
[string trimleft
[HTTP::header
Accept‐
Language]] 0 2
]]{ "fr" { pool h
ttp_fr_pool} "jp
" { pool http_jp
_pool} default
{ pool http_poo
l} }}To apply a
iRule the virtual
server requires
a HTTP Profile
as http, after
config the
profilego to
resources and
applu the irule
created
before****Mod
ule 4
Accelerating
Traffic****Leve
raging
OneConnectOn
ce a client
connected the
BIG‐IP keep a
Connection
reuse pool to
use from the
same client
orother clients
to connect to
the same
server with a
opened
connectionOpti
on under Local
Traffic‐
>Profiles:Servic
es:HTTPSource
Mask ‐
determines
eligibility for
reusing and
open/idle
connection, the
value
0.0.0.0means
all clients can
reuse the same
connection.
And
[Link]
55 only the
same client
isable to reuse
the connection
openedMaximu
m Size ‐ Max
conns held in
Connection
reuse pool, if
the maximum
is reached, the
BIG‐IPsystem
will close a
server‐side
connection
after the
response is
receivedMaxim
um Age ‐ Max
time a
conneciton can
stay open AND
idleMaximum
reuse ‐
maximum
number of
times a
connection can
be
reused****Get
ting Started
with BIG‐IP
Access Policy
Manager
(APM)****Wha
t is a BIG‐IP
APMRemote
Access
SolutionNetwor
k Access ‐ SSL
VNPortal Access
‐ reverse Proxy
Web
ApplicationsApp
lications Access
‐ Single
Application
Tunnel
including
Remote
DesktopPolicy
Enforcement
PointAuthentica
tion and
AuthorizationEn
dpoint
InspectionAcce
ss Control
ListsDynamic
Resource
Assignment
(per‐User or
Group
Basis)Single
Sign‐on
(include OAM,
Kerberos and
SAML)
2/8/2015 [Link]
dl/download/9732dc58
-1104-48e0-8c20-
32722ca82a1d/Start.w
[Link]-
[Link]:text/html;charse
t=utf-
8,%3Cpre%20style%3D%
22color%3A%20rgb(0%2
C%200%2C%200)%3B%
20font-
style%3A%20normal%3B
%20font-variant%3A… 6/7
Policy
enforcement on
LTM using
APMProfiles
required to
implement
APM: TCP,
ClientSSL,HTTP
,ServerSSL,Acc
essLooks like a
Flow chart
configuring a
APMConfig
FullWebTopCon
fig‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐
‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐
‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐
‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐
HTTP
BasicsStatus
Codes100 ‐
Informational2
00 ‐
Success300 ‐
Redirection
(301 Moved
Permanently)4
00 ‐ Client
Errors (400 Bad
requests, 401
Not Authorized,
402 Not
found)500 ‐
Server Errors
(500 Internal
Server Error,
505 HTTP
Version
Unsupported)R
esponse
HeadersServer
and Content
Format
InformationAge
ETagLocationSe
rverEntity
HeadersConten
t
informationCon
tent‐
LengthContent‐
EncodingConte
nt‐TypeLast‐
ModifiedProcess
ExamplesCachi
ngContent
Transfer
CompletionCac
hingCaching
Models:Expirati
on‐>Reduces
RequestsValidat
ion‐>Reduces
content
transferCache
ExpirationRedu
ces
RequestsExamp
le:Expires Tues
13 Feb 2007
[Link]
GMTCache‐
Control:max‐
age 3600Cache
ValidationReduc
es Content
Transfer304
Not‐Modified
Status
CodesExample:
Etag and If‐
None‐
MatchLast‐
Modified and If‐
Modified‐
SinceWhen
client receives
304 code use
the object in
local cache
2/8/2015 [Link]
dl/download/9732dc58
-1104-48e0-8c20-
32722ca82a1d/Start.w
[Link]-
[Link]:text/html;charse
t=utf-
8,%3Cpre%20style%3D%
22color%3A%20rgb(0%2
C%200%2C%200)%3B%
20font-
style%3A%20normal%3B
%20font-variant%3A… 7/7
Content
Transfer
CompletionVIP
RION
BasicsFailover
can be done
using unicast or
multicast. Can
be specified a
minimum
number of
bladesto do a
failoverMirrorin
g can be done
in same cluster,
clone all
session state to
other blade.
And
betweencluster
s, mirroring
sesseion state
to a peerVirtual
Clustered
MultiProcessing
(vCMP) ‐ a
cluster of
virtual
machines
running TMOS
iscalled a vCMP
guestImportant
VIPRION
commandsBlad
ectl ‐ allow a
user remotely
perform simple
tasks (like
reboot a blade,
connect to
consoleports) in
other blades in
a VIPRION
chassisclsh ‐
allow a user to
execute the
command on
every active
blade, user clsh
command as
aprefix to the
beginning os
another
commandtmsh
/sys vcmptmsh
/sys cluster ‐
modify the
confi of the
primary blade
in a cluster, the
system
willpropagate
all changes to
the other
blades in the
cluster (known
as cluster
synchronization
)Troubleshootin
g BasicsEnd
USer
Diagnostics
(EUD)Accessed
via
GRUBVIPRION
Specific
tests:Clustering
,Hardware
problemsTwo
VIPRION EUD
BranchesEUD_
V (VIPRION
4000)EUD_S
(VIPRION
2000)!!!!Warni
ng!!!!Do no run
it in a
production
EnvironmentRe
move all blades
from
chassisRun EUD
directly on
blade being
testedOut‐of‐
Band
ManagementLig
hts‐Out
Processor (LOP)
‐ VIPRION 2000
SeriesSerial
Port Redirector
(SPR) ‐
VIPRION 4000
Seriesinvoke
LOP/SPR at the
console with
Esc then Shift
+ (9
