From cad5da1f4f7e6f65b7b40f32f59718a4f5c45cd5 Mon Sep 17 00:00:00 2001 From: "Paul C. Buetow (mars.fritz.box)" Date: Fri, 16 May 2014 20:02:32 +0200 Subject: New release --- docs/fapi.txt | 33 ++++++++++++++++++++++++++++++--- 1 file changed, 30 insertions(+), 3 deletions(-) (limited to 'docs/fapi.txt') diff --git a/docs/fapi.txt b/docs/fapi.txt index 698a0cb..d875f43 100644 --- a/docs/fapi.txt +++ b/docs/fapi.txt @@ -128,11 +128,38 @@ EXAMPLES fapi node fooserver1.example.com delete fapi node fooserver2.example.com delete - Setting up simple NAT Services - (Docu to be written) + Setting up simple HTTP NAT Services + A simple HTTP NATed service can be created as follows. + + # Create a NATed HTTP vserver + # fapi auto resolves the IP address. + fapi vserver myvserver.example.com:80 create PROTOCOL_TCP /Common/http + + # Add the pool to the vserver. + fapi vserver myvserver.example.com:80 set pool foopool + + # Add a NATed HTTPS vserver + fapi vserver myvserver.example.com:443 create PROTOCOL_TCP /Common/http + fapi vserver myvserver.example.com:443 set pool foopool + + # Restrict the vserver to a specific VLAN (IMPORTANT! security + # hole otherwise!) + fapi vserver myvserver.example.com:443 set vlan VLANNAME + + # Put the VirtualAddress of the vserver into a specific traffic group + fapi vip myserver.example.com set tgroup some-traffic-group + + In order to make this work your application servers need to have setup a + default route to the loadbalancers floating self IP. Setting up simple SNAT Services - (Docu to be written) + Same as setting up a NATed services, but you don't need to configure + default routes from your application servers to the loadbalancers + floating self IP. + + You need also to set the SNAT flag as follows: + + fapi vserver myvserver.example.com:443 set snat automap About the NAME argument In most cases NAME can be a hostname, FQDN or an IP address. Optionally -- cgit v1.2.3 From db6eeb697243ff2ef4eff87df0b568ec8ec1b4ac Mon Sep 17 00:00:00 2001 From: "Paul C. Buetow (mars.fritz.box)" Date: Fri, 16 May 2014 20:12:07 +0200 Subject: New release --- docs/fapi.txt | 30 +++--------------------------- 1 file changed, 3 insertions(+), 27 deletions(-) (limited to 'docs/fapi.txt') diff --git a/docs/fapi.txt b/docs/fapi.txt index d875f43..93e9122 100644 --- a/docs/fapi.txt +++ b/docs/fapi.txt @@ -95,22 +95,12 @@ EXAMPLES Setting up a simple nPath Service A simple nPath service can be created as follows. - # Create a nPath HTTP vserver, 'nPath' also auto disables NAT and PAT - # fapi auto resolves the IP address. fapi vserver myvserver.example.com:80 create PROTOCOL_TCP nPath - - # Add the pool to the vserver. The vservers name inside of BigIP will be - # the FQDN followed by _PORT. In this case it would be: - # myvserver.example.com_80 (or full: /Partition/myvserver.example.com_80) - # The reason is that : are not allowed in vserver names. fapi vserver myvserver.example.com:80 set pool foopool - # Add a nPath HTTPS vserver - fapi vserver myvserver.example.com:443 create PROTOCOL_TCP nPath - fapi vserver myvserver.example.com:443 set pool foopool - - # Restrict the vserver to a specific VLAN (IMPORTANT! security + # Restrict the vservers to a specific VLAN (IMPORTANT! security # hole otherwise!) + fapi vserver myvserver.example.com:80 set vlan VLANNAME fapi vserver myvserver.example.com:443 set vlan VLANNAME # Put the VirtualAddress of the vserver into a specific traffic group @@ -131,24 +121,10 @@ EXAMPLES Setting up simple HTTP NAT Services A simple HTTP NATed service can be created as follows. - # Create a NATed HTTP vserver - # fapi auto resolves the IP address. fapi vserver myvserver.example.com:80 create PROTOCOL_TCP /Common/http - - # Add the pool to the vserver. + fapi vserver myvserver.example.com:80 set vlan VLANNAME fapi vserver myvserver.example.com:80 set pool foopool - # Add a NATed HTTPS vserver - fapi vserver myvserver.example.com:443 create PROTOCOL_TCP /Common/http - fapi vserver myvserver.example.com:443 set pool foopool - - # Restrict the vserver to a specific VLAN (IMPORTANT! security - # hole otherwise!) - fapi vserver myvserver.example.com:443 set vlan VLANNAME - - # Put the VirtualAddress of the vserver into a specific traffic group - fapi vip myserver.example.com set tgroup some-traffic-group - In order to make this work your application servers need to have setup a default route to the loadbalancers floating self IP. -- cgit v1.2.3 From 11907a7e5362509e3526ae1bede68c93f2e38add Mon Sep 17 00:00:00 2001 From: "Paul C. Buetow (mars.fritz.box)" Date: Fri, 16 May 2014 20:13:49 +0200 Subject: New release --- docs/fapi.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'docs/fapi.txt') diff --git a/docs/fapi.txt b/docs/fapi.txt index 93e9122..67fe651 100644 --- a/docs/fapi.txt +++ b/docs/fapi.txt @@ -135,7 +135,7 @@ EXAMPLES You need also to set the SNAT flag as follows: - fapi vserver myvserver.example.com:443 set snat automap + fapi vserver myvserver.example.com:80 set snat automap About the NAME argument In most cases NAME can be a hostname, FQDN or an IP address. Optionally -- cgit v1.2.3