Fallback host used in HTTP profile-f5-all
Vendor: f5
OS: all
Description:
A fallback host redirect a user to a different page/URI. It is in most cases better to use an iRule to rewrite the request. indeni will alert if fallback is used instead of an iRule.
Remediation Steps:
It is in most cases better to use an iRule to rewrite the request. That way the user maintains the same URI and can hit refresh until the page is available again.
How does this work?
This alert uses the iControl REST interface to extract the http profiles with fallback hosts.
Why is this important?
A fallback host redirect a user to a different page/URI. It is in most cases better to use an iRule to rewrite the request. That way the user maintains the same URI and can hit refresh until the page is available again.
Without Indeni how would you find this?
Login to the device’s web interface and click on “Local Traffic” -> “Profiles” -> “Services” -> “HTTP”. Then, for each of the listed profiles, verify if a fallback host has been configured.
f5-rest-mgmt-tm-ltm-profile-http
name: f5-rest-mgmt-tm-ltm-profile-http
description: Determine usage of fallback hosts in HTTP profiles
type: monitoring
monitoring_interval: 5 minutes
requires:
vendor: f5
product: load-balancer
rest-api: 'true'
comments:
f5-fallbackhost-used:
why: |
A fallback host redirect a user to a different page/URI. It is in most cases better to use an iRule to rewrite the request. That way the user maintains the same URI and can hit refresh until the page is available again.
how: |
This alert uses the iControl REST interface to extract the http profiles with fallback hosts.
can-with-snmp: true
can-with-syslog: false
steps:
- run:
type: HTTP
command: /mgmt/tm/ltm/profile/http?$select=fallbackHost,fullPath
parse:
type: JSON
file: rest-mgmt-tm-ltm-profile-http.parser.1.json.yaml
f5_fallback_host_used
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/f5/f5_fallback_host_used.scala