
connection.
Ignore Case
This function always evaluates to true, and is intended to be used to apply the
Ignore Caseflag for comparisons when it is not set on the cluster. When this
function is ANDed with other functions, it has the effect of forcing case to be
ignored for any comparisons done by the match rule.
Insert Client IP (HTTPS only)
When this flag is enabled, Equalizer inserts an X-forwarded-for:header with
the client's IP address into all client requests before they are sent to the server.
This flag is disabled by default for HTTP clusters and enabled by default for
HTTPS clusters.
Once Only
Limits Equalizer to parsing headers (and executing match rules) for only the
first request of any client making multiple requests across a single TCP
connection. This option is off by default: meaning that Equalizer will parse the
headers of every client request.
Disable
Enable this flag to disable this match rule without deleting it. This can be useful
when testing new match rules.
TCP Multiplexing
Enables TCP multiplexing for a cluster. TCP multiplexing must also be enabled on
at least one server instance in the server pool assigned to the cluster (or one of
its match rules).
9. The ordering of match rules is important, as they are processed from first to last until one of them evaluates
to
true
, at which time the match body is processed. The initial match expression of a new rule, any() is one
that will always evaluate to
true
, meaning that this match rule will always be selected. It is good practice to
be cautious when adding new match rules to ensure that all the traffic to a cluster does not get mishandled.
Use the Disable flag to skip a match rule that is still being developed.
10. Click on the Commit button to Commit the parameter selections.
To add a match rule to a Layer 7 cluster using the CLI follow this general procedure:
1. Log into the CLI using a login that has add/del access for the cluster. (See "Starting the CLI" on page 128.)
2. At the eqcli prompt enter the cluster name followed by "match
maname"
. In the example below a Match
Rule test is added to the Layer 7 cluster Sp-fe_http.
Match Rule Name : test
Next Match Rule : ma01
Cluster Name : SP-fe_http
Server Pool :
Responder :
Cookie Path :
Cookie Domain :
Cookie Scheme : 0
Cookie Age : 0
Cookie Generation : 0
Flags : disable
Expression :
any()
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
All Rights Reserved.
335
Equalizer Administration Guide
Kommentare zu diesen Handbüchern