Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

L7 policy action "REJECT" not supported by Big-IP #225

Open
1 of 2 tasks
m-kratochvil opened this issue May 19, 2023 · 2 comments
Open
1 of 2 tasks

L7 policy action "REJECT" not supported by Big-IP #225

m-kratochvil opened this issue May 19, 2023 · 2 comments
Assignees
@m-kratochvil

Comments

@m-kratochvil
Copy link
Contributor

m-kratochvil commented May 19, 2023 •
edited
Loading

Upstream Octavia supports an L7 policy action REJECT to block inbound HTTP requests, sending a reply back to the client with corresponding HTTP response code (documentation)

The Big-IP equivalent - LTP (local traffic policy) - and in consequence also the AS3 declarative API - do not support a REJECT action, at this time only RESET action is supported (documentation).

Action plan:

  • update CCloud LBaaS documentation, to let the users know about this difference
  • submit RFE to F5 to add support for REJECT action to the TMOS LTP and AS3

Related discussion in recent Slack thread https://convergedcloud.slack.com/archives/CSP5GMKD1/p1683226281512219
@m-kratochvil m-kratochvil self-assigned this May 19, 2023
@m-kratochvil
Copy link
Contributor Author

Case #00410010 submitted to F5 and acknowledged.

@m-kratochvil
Copy link
Contributor Author

F5 accepted the RFE:

This RFE can be tracked as ID773409 (it is a more general RFE to allow many types of HTTP responses, not just 403).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@m-kratochvil m-kratochvil

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@m-kratochvil