F5-LTM配置参数说明
F5 LTM 配置参数说明Local Traffic
virtual servers
Standard General Properties
基本的VS类型。Name:
Type:Host or Network
Address:
Mask:
Service port
State
configuration
Type(standard)
Protocol(tcp)
Protocol profile(client)
Protocol profile(server)
Oneconnect profile
HTTP profile
FTP profile
SSL Profile (Client)
SSL Profile (Server)
Authentication Profiles
Stream Profile
Statistics Profile
VLAN Traffic
Connection Limit
Connection Mirroring
Address Translation
Port Translation
SNAT pool
Clone Pool (Client)
Clone Pool (Server)
Last Hop Pool
Type(standard)
Protocol(udp)
Protocol profile(Client)
Protocol profile(server)
Statistics profile
VLAN Traffic
Connection Limit
Connection Mirroring
Address Translation
Port Translation
SNAT pool
Clone Pool (Client)
Clone Pool (Server)
Last Hop Pool
Forwarding layer2Type(forwarding layer2)该VS类型可应用在对二
P rotocol
Protocol profile(Client)
Statistics Profile
VLAN Traffic
Connection Limit
Connection Mirroring
SNAT pool
Clone Pool (Client)
Clone Pool (Server)
Last Hop Pool Forwarding IP Type(forwarding IP)
该VS类型应用在直接转
P rotocol
Protocol profile(Client)
Statistics Profile
VLAN Traffic
Connection Limit
Connection Mirroring
SNAT pool
Clone Pool (Client)
Clone Pool (Server)
Last Hop Pool Performance HTTP Type(performance HTTP)该VS类型结合Fast HTT
Protocol
Protocol profile(Client)
Statistics Profile
VLAN Traffic
Connection Limit
Connection Mirroring
Clone Pool (Client)
Clone Pool (Server)
Last Hop Pool Performance layer4Type(performance layer4)该VS类型结合Fast L4
Protocol
Protocol profile(Client)
Statistics profile
VLAN Traffic
Connection Limit
Connection Mirroring
Address Translation
Port Translation
SNAT pool
Clone Pool (Client)
Clone Pool (Server)
Last Hop Pool Performance rejectType(performance reject)该vs类型将拒绝到该vs
Protocol
Statistics Profile
VLAN Traffic
Profiles
Service-http General Properties
Name:
Parent Profile
Setting
Fallback Host
Header Insert
Header Erase
Response Chunking
OneConnect Transformations
Redirect Rewrite
Maximum Header Size
Pipelining
Insert XForwarded For
LWS Maximum Columns
LWS Separator
Maximum Requests
Compression
Compression
URI Compression
URI List
Content Compression
Content List
Preferred Method
Minimum Content Length
Compression Buffer Size
gzip Compression Level
gzip Memory Level
gzip Window Size
Vary Header
HTTP/1.0 Requests
Keep Accept Encoding
CPU Saver
CPU Saver High Threshold
CPU Saver Low Threshold service-ftp General Properties
Name:
Parent Profile
settings
Translate Extended
Data Port
persist-cookie General Properties
Name:
Persistence type-cookie
Parent Profile
configuration
cookie method-http cookie insert
cookie name:
Expiration: Session Cookie
cookie method-cookie hash
cookie name:
Hash offset
Hash Length
Timeout
Mirror Persistence
Match Across Services
Match Across Virtual Servers
Match Across Pools
cookie method-http cookie passive
Cookie Name:
cookie method-http cookie rewrite
Cookie Name
Expiration: Session Cookie
General Properties
persist-destination
Name:
Persistence type-destination address
Parent Profile
configuration
Mirror Persistence
Match Across Services
Match Across Virtual Servers
Match Across Pools
Mask
Timeout
persist-hash General Properties
Name:
Persistence type-hash
Parent Profile
configuration
Mirror Persistence
Match Across Services
Match Across Virtual Servers
Match Across Pools
iRule
Timeout
General Properties
persist-microsoft re
Name:
Persistence type-microsoft remot desktop
Parent Profile
configuration
Mirror Persistence
Match Across Services
Match Across Virtual Servers
Match Across Pools
Timeout
Has Session Directory
persist-sip General Properties
Name:
Persistence type-sip
Parent Profile
configuration
Mirror Persistence
Match Across Services
Match Across Virtual Servers
Match Across Pools
Timeout
persist-source_addr G eneral Properties
Name:
Persistence type-source_addr
Parent Profile
configuration
Mirror Persistence
Match Across Services
Match Across Virtual Servers
Match Across Pools
Timeout
Mask
proxy mapping
persist-ssl General Properties
Name:
Persistence type-ssl
Parent Profile
configuration
Mirror Persistence
Match Across Services
Match Across Virtual Servers
Match Across Pools
Timeout
persist-universal General Properties
Name:
Persistence type-universal
Parent Profile
configuration
Mirror Persistence
Match Across Services
Match Across Virtual Servers
Match Across Pools
iRule
Timeout
Name:
Parent Profile
settings
Reset on Timeout
Reassemble IP Fragments
Idle Timeout
TCP Handshake Timeout
Maximum Segment Size Override
PVA Acceleration
IP ToS to Client
IP ToS to Server
Link QoS to Client
Link QoS to Server
TCP Timestamp Mode
TCP Window Scale Mode
Generate Internal Sequence Numbers
Strip Sack OK
RTT from Client
RTT from Server
Loose Initiation
Loose Close
TCP Close Timeout
protocol-fasthttp General Properties
Name:
Parent Profile
Settings
Reset on Timeout
Idle Timeout
Maximum Segment Size Override
Client Close Timeout
Server Close Timeout
Unclean Shutdown
Force HTTP 1.0 Response
OneConnect
Maximum Pool Size
Minimum Pool Size
Ramp-Up Increment
Maximum Reuse
Idle Timeout Override
Replenish
HTTP
Parse Requests
Maximum Header Size
Maximum Requests
Insert XForwarded For
Header Insert
Name:
Parent Profile
Settings
Reset On Timeout
Time Wait Recycle
Proxy Maximum Segment
Proxy Options
Proxy Buffer Low
Proxy Buffer High
Idle Timeout
Time Wait
Fin Wait
Close Wait
Send Buffer
Receive Window
Keep Alive Interval
Maximum Syn Retransmissions
Maximum Segment Retransmissions
IP ToS
Link QoS
Selective ACKs
Extended Congestion Notification
Extensions for High Performance (RFC 1323)
Limited Transmit Recovery
Slow Start
Deferred Accept
Bandwidth Delay
Nagle’s Algorithm
Acknowledge on Push
MD5 Signature
MD5 Signature Passphrase
General Properties
Name:
Parent Profile
Settings
Idle Timeout
IP ToS
Link QoS
Datagram LB
SSL-clientssl General Properties
Name:
Parent Profile
configuration
Certificate
Key
Pass Phrase
Confirm Pass Phrase
Chain
Trusted Certificate Authorities
Ciphers
Options
ModSSL Methods
Cache Size
Cache Timeout
Alert Timeout
Handshake Timeout
Renegotiate Period
Renegotiate Size
Renegotiate Max Record Delay
Unclean Shutdown
Strict Resume
Non-SSL Connections
Client Authentication
Client Certificate
Frequency
Certificate Chain Traversal Depth
Advertised Certificate Authorities
Certificate Revocation List (CRL) SSL-serverssl General Properties
Name:
Parent Profile
configuration
Certificate
Key
Pass Phrase
Confirm Pass Phrase
Chain
Trusted Certificate Authorities
Ciphers
Options
ModSSL Methods
Cache Size
Cache Timeout
Alert Timeout
Handshake Timeout
Renegotiate Period
Renegotiate Size
Unclean Shutdown
Strict Resume
Server Authentication
Server Certificate
Frequency
Certificate Chain Traversal Depth
Authenticate Name
Certificate Revocation List (CRL)
General Properties
Authentication-profi
Name:
Type
Parent Profile
Configuration
Mode
Configuration
Rule
Idle Timeout
General Properties
Authentication-confi
Name:
Type
Configuration
Hosts
Search Type-user
User Base DN
User Key
Cache Size
Secure
Admin DN
Admin Password
Confirm Admin Password
Group Base DN
Group Key
Group Member Key
Valid Groups
Role Key
Valid Roles
Search Type-certificate map
User Base DN
User Key
Certificate Map Base DN
Certificate Map Key
Use Serial Certificate Map
Cache Size
Cache Timeout
Secure
Admin DN
Admin Password
Confirm Admin Password
Group Base DN
Group Key
Group Member Key
Valid Groups
Role Key
Valid Roles
Search Type-certificate
User Base DN
User Key
Object Class
Cache Size
Cache Timeout
Secure
Admin DN
Admin Password
Confirm Admin Password
Group Base DN
Group Key
Group Member Key
Valid Groups
Role Key
Valid Roles
Other-oneconnect General Properties
Name:
Parent Profile
Settings
Source Mask
Maximum Size
Maximum Age
Maximum Reuse
Idle Timeout Override Other-statistics General Properties
Name:
Paren Profile
Settings
Field 1
Field 2
Field 3 …
Field 32
Other-stream General Properties
Name:
Paren Profile
Settings
Source
Target
iRule
Properties
Name
Definition
Pool
Configuration
Name
Health Monitors
Availability Requirement
Allow SNAT
Allow NAT
Action On Service Down
Slow Ramp Time
IP ToS to Clien
IP ToS to Server
Link QoS to Client
Link QoS to Server
Resources
Load Balancing Method
Priority Group Activation
New Members-address
New Members-service port Node
General Properties
Address
Name
Configuration
Health Monitors
Select Monitors
Availability Requirement
Ratio
Connection Limit
Monitor
Gateway ICMP General Properties
利用ICMP(ping)检查
N ame
Type
Import Settings
Configuration
Interval
Timeout
Transparent
Alias Address
Alias Service Port
ICMP General Properties
利用ICMP(ping)检查
N ame
Type
Import Settings
Configuration
Interval
Timeout
Transparent
Alias Address
TCP_echo General Properties
利用TCP三次握手进行健
Name
Type
Import Settings
Configuration
Interval
Timeout
Transparent
Alias Address HTTP General Properties 验证HTTP 服务健康性,
Name
Type
Import Settings
Configuration
Interval
Timeout
Send String
Receive String
User Name
Password
Reverse
Transparent
Alias Address
Alias Service Port HTTPs General Properties 验证HTTPs服务的健康性
Name
Type
Import Settings
Configuration
Interval
Timeout
Send String
Receive String
Cipher List
User Name
Password
Compatibility
Client Certificate
Reverse
Alias Address
Alias Service Port FTP General Properties 验证FTP服务的健康性,
Name
Type
Import Settings
Configuration
Interval
Timeout
User Name
Password
Path / Filename
Mode
Alias Address
Alias Service Port
Debug
TCP General Properties 利用TCP三次握手进行健
Name
Type
Import Settings
Configuration
Interval
Timeout
Send String
Receive String
Reverse
Transparent
Alias Address
Alias Service Port TCP Half Open General Properties 利用TCP三次握手进行健
Name
Type
Import Settings
Configuration
Interval
Timeout
Alias Address
Alias Service Port UDP General Properties 利用UDP进行健康性检查
Name
Type
Import Settings
Configuration
Interval
Timeout
Send String
Send Packets
Timeout Packets
Alias Address
Alias Service Port External General Properties 利用external类型的mo
Name
Type
Import Settings
Configuration
Interval
Timeout
External Program
Arguments
Variables
Alias Address
Alias Service Port POP3General Properties 利用该monitor类型对P
Name
Type
Import Settings
Configuration
Interval
Timeout
User Name
Password
Alias Address
Alias Service Port
Debug
SMTP General Properties 利用该monitor类型对S
Name
Type
Import Settings
Configuration
Interval
Timeout
Domain
Alias Address
Alias Service Port
Debug
MSSQL General Properties 利用该monitor类型对微
Name
Type
Import Settings
Configuration
Interval
Timeout
Send String
Receive String
User Name
Password
Database
Receive Row
Receive Column
Count
Alias Address
Alias Service Port Oracle General Properties 利用该monitor类型对O
Name
Type
Import Settings
Configuration
Interval
Timeout
Send String
Receive String
User Name
Password
Database
Receive Row
Receive Column
Count
Alias Address
Alias Service Port
Debug
Debug
IMAP General Properties
对IMAP流量进行健康性
N ame
Type
Import Settings
Configuration
Interval
Timeout
User Name
Password
Folder
Alias Address
Alias Service Port
Debug
LDAP General Properties
利用该monitor类型对L
Name
Type
Import Settings
Configuration
Interval
Timeout
User Name
Password
Base
Filter
Security
Mandatory Attributes
Alias Address
Alias Service Port
Debug
NNTP General Properties
利用该monitor类型对网
Name
Type
Import Settings
Configuration
Interval
Timeout
User Name
Password
Newsgroup
Alias Address
Alias Service Port RADIUS General Properties 利用该monitor类型对R
Name
Type
Import Settings
Configuration
Interval
Timeout
User Name
Password
Secret
NAS IP Address
Alias Address
Alias Service Port
Debug
Real Server General Properties 利用该monitor类型对p
Name
Type
Import Settings
Configuration
Interval
Timeout
Method
Command
Metrics
Agent
Alias Address
Alias Service Port Scripted General Properties 利用该monitor类型创建
Name
Type
Import Settings
Configuration
Interval
Timeout
File Name
Alias Address
Alias Service Port
Debug
SIP General Properties
利用该monitor类型对S
Name
Type
Import Settings
Configuration
Interval
Timeout
Mode
Additional Accepted Status Codes
Alias Address
Alias Service Port
Debug
SNMP DCA General Properties
利用该monitor类型对运
Name
Type
Import Settings
Configuration
Interval
Timeout
Community
Version
Agent Type
CPU Coefficient
CPU Threshold
Memory Coefficient
Memory Threshold
Disk Coefficient
Disk Threshold
Variables
Alias Address
Alias Service Port
SNMP DCA Base General Properties
利用该monitor类型对运
Name
Type
Import Settings
Configuration
Interval
Timeout
Community
Version
Variables
Alias Address
Alias Service Port
SOAP General Properties
利用该monitor类型测试
Name
Import Settings
Configuration
Interval
Timeout
User Name
Password
Protocol
URL Path
Namespace
Method
Parameter Name
Parameter Type
Parameter Value
Return Type
Return Value
Expect Fault
Alias Address
Alias Service Port WAP General Properties 利用该monitor类型监视
Name
Type
Import Settings
Configuration
Interval
Timeout
Send String
Receive String
Secret
Accounting Node
Accounting Port
Server ID
Call ID
Session ID
Framed Address
Alias Address
Alias Service Port
Debug
WMI General Properties 利用该monitor类型检查
Name
Type
Import Settings
Configuration
Interval
Timeout
User Name
Password
URL
Command
Metrics
Agent
Post
Alias Address
Alias Service Port SNATs
SNAT List General Properties
Name
Configuration
Translation
Origin
Address list-address
Address list-mask
VLAN Traffic
SNAT Pool List General Properties
Name
Configuration
member list-address
General Properties
SNAT Translation Lis
IP Address
State
Configuration
ARP
Connection Limit
TCP Idle Timeout
UDP Idle Timeout
IP Idle Timeout
NAT List General Properties
NAT Address
Origin Address
State
Configuration
ARP
VLAN Traffic Network
Interface
interface list Interface
status
name
MAC Address
Media Speed
VLAN Count
Trunk
interface mirroring C onfiguration
Interface Mirroring State
Destination Interface
Mirrored Interfaces
Route
Properties
type
Destination
Netmask
Resource
Self IPs
Configuration
IP Address
Netmask
VLAN
Port Lockdown
Floating IP
Unit ID
Packet Filters
General Properties
Packet Filtering
Unhandled Packet Action
Options-Filter established connections
Options-Send ICMP error on packet reject
Exemptions
Protocols-Always accept ARP
Protocols-Always accept important ICMP
MAC Addresses
IP Addresses
VLANs
Rule Configuration
Name
Order
Action
Apply to VLAN
Logging
Filter Expression
Filter Expression Method
Protocols
Source Hosts and Networks
Destination Hosts and Networks
Destination Port
Spanning Tree
Properties
mod
Hello time
Maximum Age
Forward Delay