Forum Discussion

SanYang's avatar
SanYang
Icon for Cirrus rankCirrus
May 22, 2024
Solved

Can iRule forward request to pool after ASM block without ASM:unblock ?

Hello expert,   I have written an iRule that when blocked forwards to other pools without any problems. It is done ! when ASM_REQUEST_DONE { if { [ASM::status] equals "blocked" } { ...
application delivery
asm
  • Amine_Kadimi's avatar
    Amine_Kadimi
    May 23, 2024

    Hi,

    As per the traffic flow design, this would not be possible. You can consider that the request goes through LTM (the VS), then ASM (the security policy), then LTM if not blocked for further processing including sending to the pool member. 

    So in your scenario the request won't be handed from ASM back to LTM since it will be blocked without further processing.

    See the image below for the flow details

     

Amine_Kadimi's avatar
Amine_Kadimi
Icon for MVP rankMVP
May 23, 2024

Hi,

As per the traffic flow design, this would not be possible. You can consider that the request goes through LTM (the VS), then ASM (the security policy), then LTM if not blocked for further processing including sending to the pool member. 

So in your scenario the request won't be handed from ASM back to LTM since it will be blocked without further processing.

See the image below for the flow details