贴几个F5公司2005 iRule大赛的获奖iRule-优快云博客

这几天学习iRule，参考了F5网站上不少例子，顺便也把２００５年iRule大赛的部分获奖iRule贴一下，一是备忘，二是供有需要的兄弟参考。

Tcl/Tk 代码

F5网站上iRule大赛的获奖iRule
rule web_request {
when HTTP_REQUEST {
set ramcache_enable 0
if { [matchclass [IP::remote_addr] equals $::banned_ips] } {
reject
}
if { [matchclass [HTTP::header Host] equals $::spec_hosts] } {
if { [HTTP::header Host] starts_with "stat" } {
set ramcache_enable 1
use pool web_stat
}
elseif { [HTTP::header Host] starts_with "userpic" } {
use pool web_proxy
}
elseif { [HTTP::header Host] starts_with "files" } {
use pool web_proxy
}
elseif { [HTTP::header Host] starts_with "mrtg" } {
use pool web_mrtg
}
}
elseif { [HTTP::uri] starts_with "/userpic/" } {
if { [HTTP::header If-Modified-Since] contains ":" } {
HTTP::respond 304
} else {
use pool web_proxy
}
}
elseif { [HTTP::uri] starts_with "/directory.bml" } {
use pool web_directory
}
elseif { [matchclass [HTTP::uri] starts_with $::static_dirs] } {
set ramcache_enable 1
use pool web_static
}
elseif { [HTTP::uri] starts_with "/interface/atom" } {
use pool nokia_lifeblog
} else {
use pool web_proxy
}
}
when CACHE_REQUEST {
if { $ramcache_enable == 0 } {
CACHE::disable
}
}
}
=======================================
when RULE_INIT {
set ::maxconnect 200
set ::freezetime 600
array set ::users { }
array set ::spammers { }
}
when CLIENT_ACCEPTED {
set clientip [IP::remote_addr]
set now [clock second]
if { [ info exists ::spammers($clientip) ] } {
set timeelapsed [expr $now - $::spammers($clientip)]
if { $::freezetime > $timeelapsed } {
incr ::users(nb,$clientip)
reject
return
}
else {
if { [ $::users(nb,$clientip) ] > $::maxconnect } {
# this guy is still trying to spam, even when blacklisted
# we keep him blacklisted, but we reset the counters
set ::spammers($clientip) $now
set ::users(nb,$clientip) 1
set ::users(time,$clientip) $now
log "client $clientip remains in spammerslist $::users(nb,$clientip
connections rejected in the last $::freezetime seconds"
reject
return
}
else {
unset ::spammers($clientip)
log "client $clientip removed from spammerslist $::users(nb,$clientip) connections rejected in the last $::freezetime seconds"
}
}
}
if { [ info exists ::users(nb,$clientip)] } {
log "autre passage $clientip $now $::users(nb,$clientip)"
incr ::users(nb,$clientip)
if { $::users(nb,$clientip) > $::maxconnect } {
set ::spammers($clientip) $now
set ::users(nb,$clientip) 1
set ::users(time,$clientip) $now
log "client $clientip added to spammerslist $::users(nb,$clientip connections accepted in the last $::freezetime seconds"
reject
return
}
} else {
# First Time we see this clientip
set ::users(nb,$clientip) 1
set ::users(time,$clientip) $now
log "PREMIER CLIENT $clientip $now"
}
pool mail-smtp
}
============================================
when RULE_INIT {
# F5 iRule for performing rewriting of
#
# - HTTP-request URI:s
#
# and
#
# - HTTP-response 'Location' headers
# (redirect rewrite's)
#
# Define URI rewrite rules here
set ::request_rewrite [list "/a /b" "/foo /bar"];
# Define Redirect Rewrite rules here
set ::redirect_rewrite [list "http://10.1.2.3/a /b"]
}
when HTTP_REQUEST {
set uri [HTTP::uri];
log LOCAL0.debug "URI=$uri";
# check all 'request_rewrite' rules..
# break when first match is found..
foreach x $::request_rewrite {
set a [getfield $x " " 1];
log LOCAL0.debug "? uri start_with '$a' ...";
if { $uri starts_with $a } {
set b [getfield $x " " 2];
log LOCAL0.debug "...yes, replace '$a' with '$b'";
set len [string length $a];
set tmp [substr $uri $len];
set uri "${b}${tmp}";
log LOCAL0.debug "URI=$uri";
HTTP::uri $uri;
break;
}
}
}
when HTTP_RESPONSE {
# check if redirect (HTTP status 3xx)
# and 'Location:' header exists...
#
# return immediately if
# there is nothing to rewrite
if { [HTTP::status] starts_with "3" } {
set location [HTTP::header "Location"];
if { $location == "" } {
return;
}
} else {
return;
}
# check all 'ProxyPassReverse' entries..
# and 'break' when first match is found...
log LOCAL0.debug "Location: $location (check for rewrites)";
foreach x $::redirect_rewrite {
set a [getfield $x " " 1];
log LOCAL0.debug " ? starts_with '$a' ... ";
if { $location starts_with $a } {
set b [getfield $x " " 2];
log LOCAL0.debug "...yes, replace '$a' with '$b'";
set len [string length $a];
set tmp [substr $location $len];
set location "${b}${tmp}";
log LOCAL0.debug "Location: $location";
HTTP::header replace "Location" $location;
break;
}
}
}
==========================================
rule my-iRule {
when CLIENT_ACCEPTED {
if { [active_members my-pool] == 0 } {
discard
} else {
use pool my-pool
if { ([IP::client_addr] eq "1.1.1.8") || ([IP::client_addr] eq "1.2.1.8") } {
persist none
} else {
persist source_addr 1800
}
}
}
}
======================================
when HTTP_REQUEST {
set DEBUG 1
if { $FINISHED } {
return
}
# REDIRECTS for So. Cal users
set refer_host [URI::host [HTTP::header "Referer"]]
log local0. "Referer: ${refer_host} IP: [IP::remote_addr]"
if { [IP::remote_addr] starts_with "10.120." } {
if { not (${refer_host} starts_with "intranet") } {
if { [HTTP::uri] == "/" || [HTTP::uri] == "" || [HTTP::uri] == "/our/intranet/site"} {
if { $DEBUG } {
log local0. "SoCal redirect: [ IP::remote_addr ]"
log local0. "URI: [ HTTP::uri ]"
log local0. "Referer: ${refer_host}"
}
HTTP::redirect "http://${host}/intranet/socal"
set FINISHED 1
return
}
}
}
}
==========================================
when HTTP_REQUEST {
##
## Default Variables
##
set uriValue [HTTP::uri]
set srcAddr [IP::remote_addr]
set internalHost http://internal.example.com
set sendCacheControl 0
# 1 is compressed, 0 is not
set compress_client_ok 1
##
## Compression
##
if { $srcAddr starts_with "10.1.1." } {
# Disabling Compression for Client 1
set compress_client_ok 0
} elseif { $srcAddr starts_with "10.2.2." } {
# Disabling Compression for Client 2
set compress_client_ok 0
} elseif { $srcAddr starts_with "10.3.3." } {
# Disabling Compression for Client 3
# Except for NPS
if { $uriValue starts_with "/nps/" } {
set compress_client_ok 1
} else {
set compress_client_ok 0
}
} elseif { $srcAddr starts_with "192.168.113." } {
# The lab for testing
set compress_client_ok 0
}
##
## Generic Redirects
##
if { $uriValue starts_with "/forme" } {
HTTP::uri /index.html
} elseif { $uriValue starts_with "/formf" } {
HTTP::uri /index_f.html
} elseif { $uriValue starts_with "/fape" } {
HTTP::uri /fapindex.html
} elseif { $uriValue starts_with "/fapf" } {
HTTP::uri /fapindex_f.html
} elseif { $uriValue starts_with "/vace" } {
HTTP::uri /vacindex.html
} elseif { $uriValue starts_with "/vacf" } {
HTTP::uri /vacindex_f.html
} elseif { $uriValue starts_with "/idcd" } {
HTTP::uri /idcd.html
} elseif { $uriValue starts_with "/johnson" } {
HTTP::uri /johnsonindex.html
} elseif { $uriValue starts_with "/pplus" } {
HTTP::redirect $internalHost/forms90/f90nosec?config=pplus
}
##
## Start the WebSphere 4 Configuration
##
if { $uriValue starts_with "/sso/" } {
HTTP::header replace HOST sso-app.example.com:8000
pool was
} elseif { $uriValue starts_with "/nps/" } {
HTTP::header replace HOST nps-app.example.com:8000
pool was
} elseif { $uriValue starts_with "/qar/" } {
HTTP::header replace HOST qar-app.example.com:8000
pool was-qar
} elseif { $uriValue starts_with "/prs" } {
HTTP::header replace HOST prs-app.example.com:8000
pool was
} elseif { $uriValue starts_with "/inqportal/" } {
HTTP::header replace HOST ip-app.example.com:8000
pool was
} elseif { $uriValue starts_with "/gmp/" } {
HTTP::header replace HOST gmp-app.example.com:8000
pool was
} elseif { $uriValue starts_with "/lws/" } {
HTTP::header replace HOST lw-app.example.com:8000
pool was
} elseif { $uriValue starts_with "/oms/" } {
HTTP::header replace HOST om-app.example.com:8000
pool was
} elseif { $uriValue starts_with "/es/" } {
if { $uriValue contains "u_.uhtml" } {
set sendCacheControl 1
}
pool was-es
} elseif { $uriValue starts_with "/wsso/" } {
regsub "/wsso/" $uriValue "/" newURI
HTTP::header replace HOST abcclogin-app.example.com:8000
HTTP::uri $newURI
pool was
} elseif { $uriValue starts_with "/ABCCLogin/" } {
HTTP::header replace HOST abcclogin-app.example.com:8000
pool was
}
##
## Starting the Oracle Application Server Configuration
##
if { $uriValue starts_with "/discoverer/osso_login_success" } {
regsub "/discoverer/" $uriValue "/" newURI
HTTP::uri $newURI
pool oas-disco
} elseif { $uriValue starts_with "/discoverer/osso_logout_success" } {
regsub "/discoverer/" $uriValue "/" newURI
HTTP::uri $newURI
pool oas-disco
} elseif { $uriValue starts_with "/osso_login_success" } {
if { [HTTP::header refer] contains "/discoverer/" } {
pool oas-disco
} else {
pool oas-app
}
} elseif { $uriValue starts_with "/osso_logout_success" } {
if { [HTTP::header refer] contains "/discoverer/" } {
pool oas-disco
} else {
pool oas-app
}
} elseif { $uriValue starts_with "/portal/pls/" } {
regsub "/portal/" $uriValue "/" newURI
HTTP::uri $newURI
pool oas-app
} elseif { $uriValue starts_with "/infra/pls/" } {
regsub "/infra/" $uriValue "/" newURI
HTTP::uri $newURI
pool oas-infra
} elseif { $uriValue starts_with "/sso_mes/forms90/" } {
regsub "/sso_mes/" $uriValue "/" newURI
HTTP::uri $newURI
pool oas-app
} elseif { $uriValue starts_with "/sso_cmf/forms90/" } {
regsub "/sso_cmf/" $uriValue "/" newURI
HTTP::uri $newURI
pool oas-app
} elseif { $uriValue starts_with "/orasso/" } {
regsub "/orasso/" $uriValue "/pls/orasso" newURI
HTTP::uri $newURI
pool oas-infra
} elseif { $uriValue starts_with "/reports" } {
pool oas-app
} elseif { $uriValue starts_with "/forms90" } {
pool oas-app
} elseif { $uriValue starts_with "/discoverer" } {
pool oas-disco
} elseif { $uriValue starts_with "/jinitiator" } {
pool oas-app
} elseif { $uriValue starts_with "/vac/" } {
pool oas-app
} elseif { $uriValue starts_with "/icons/" } {
pool oas-app
} elseif { $uriValue starts_with "/images/" } {
pool oas-app
} elseif { $uriValue starts_with "/pls/" } {
pool oas-infra
}
##
## Starting the WebSphere 6 Configuration
##
if { $uriValue starts_with "/UWAWeb/" } {
pool was6
} elseif { $uriValue starts_with "/RAWeb/" } {
pool was6
} elseif { $uriValue starts_with "/PlanAA" } {
pool was6
} elseif { $uriValue starts_with "/GroupCCWeb/" } {
pool was6
} elseif { $uriValue starts_with "/AgentBonusWeb/" } {
pool was6
} elseif { $uriValue starts_with "/ftp/" } {
pool was6
} elseif { $uriValue starts_with "/PMP/" } {
pool was6
}
##
## End of HTTP_REQUEST Configuration
##
}
when HTTP_RESPONSE {
##
## Default Variables for this Section
##
set location [HTTP::header location]
set destHost "//internal.example.com"
set sunHost "//bcsun...example.com:800."
set unifiHost "-app.example.com:8000"
set wwwHost "//wserv1.example.com"
set webAppHost "//webappi.example.com"
set hdr_content_type [string tolower [HTTP::header Content-Type]]
##
## Compression
##
if { $hdr_content_type starts_with "text/" or
$hdr_content_type equals "application/x-javascript" or
$hdr_content_type equals "application/xml" } {
if { $compress_client_ok == 1 } {
COMPRESS::enable
HTTP::header insert Vary Accept-Encoding
}
}
##
## Sending HTTP/1.1 Cache-Control Header if required
##
if { $sendCacheControl equals 1 } {
HTTP::header replace Cache-Control "no-store, no-cache, must-revalidate, post-check=0, pre-check=0"
}
##
## Ensuring the location header is correct
##
if { [regexp "\/\/....$unifiHost" $location] } {
regsub "\/\/....$unifiHost" $location $destHost newLocation
HTTP::header replace location $newLocation
} elseif { [regexp "\/\/...$unifiHost" $location] } {
regsub "\/\/...$unifiHost" $location $destHost newLocation
HTTP::header replace location $newLocation
} elseif { [regexp "\/\/..$unifiHost" $location] } {
regsub "\/\/..$unifiHost" $location $destHost newLocation
HTTP::header replace location $newLocation
} elseif { $location contains $wwwHost } {
regsub $wwwHost $location $destHost newLocation
HTTP::header replace location $newLocation
} elseif { $location contains $webAppHost } {
regsub $webAppHost $location $destHost newLocation
HTTP::header replace location $newLocation
} elseif { $location contains $sunHost } {
regsub $sunHost $location $destHost newLocation
HTTP::header replace location $newLocation
}
##
## End of HTTP_RESPONSE Configuration
##
}
============================================
when RULE_INIT {
array set ::CLIENT_SERVERS {
#SITE B CLIENT SERVERS
#SERVER IP #SERVER VIP
10.10.70.128 10.10.69.50
10.10.70.129 10.10.69.50
10.10.70.130 10.10.69.50
10.10.70.131 10.10.69.50
10.10.70.132 10.10.69.50
10.10.70.133 10.10.69.50
10.10.70.134 10.10.69.50&