F5Networks / f5-appsvcs-extension

F5 BIG-IP Application Services 3 Extension
Apache License 2.0
167 stars 54 forks source link

UDP profile issues #609

Open p-semenov-f5 opened 2 years ago

p-semenov-f5 commented 2 years ago

I have simple big-ip config below. It contains 4 psofiles: 2 udp, 1 http and 1 ssl.

  1. there is no way to add 2 udp profiles in AS3: --> "/Common/Shared/vs_http_2/profileUDP: should NOT have more than 1 properties"
  2. there is no way to use udp and http profiles toghether: when we have http profile, we consider that it will be 'Service_HTTP'. But when we set 'Service_UDP', http profile will be dropped. Does it mean UDP have higher priority? What is the right decision here?
ltm virtual /Common/vs_http_2 {
    destination /Common/10.33.0.12:80
    ip-protocol udp
    last-modified-time 2022-05-17:09:33:15
    mask 255.255.255.255
    pool /Common/pool_http
    profiles {
        /Common/do-not-remove-without-replacement {
            context serverside
        }
        /Common/http { }
        /Common/udp_decrement_ttl {
            context clientside
        }
        /Common/udp_gtm_dns {
            context serverside
        }
    }
    serverssl-use-sni disabled
    source 0.0.0.0/0
    translate-address enabled
    translate-port enabled
    vlans {
        /Common/internal
    }
    vlans-enabled
}
dstokesf5 commented 2 years ago

Would a separate ingress and egress option for UDP profiles satisfy your use case? This would look similar to specifying separate ingress and egress profiles int he profileTCP property.

p-semenov-f5 commented 2 years ago

I think it can be ok. Just make it work:)