EdgeADC Build 1895
An Edgenexus ADC Administration Guide
×
Menu

flightPATH

flightPATH is the traffic management technology built into the ADC. flightPATH allows you to inspect HTTP and HTTPS traffic in real-time and perform actions based on conditions.
flightPATH rules must be applied to a VIP when IP objects are used within the rules.
A flightpath rule consists of four elements:
1.     Details, where you define the flightPATH Name and Service to which it is attached.
2.     Condition(s) that can be defined that cause the rule to be triggered.
3.     Evaluation that allows the definition of variables that can be used within Actions
4.     Actions that are used to manage what should happen when conditions are met
Details
The details section shows the available flightPATH rules. You can add new flightPATH rules and remove defined ones from this section.
Adding a new flightPATH rule
Field
Description
FlightPATH Name
This field is for the name of the flightPATH rule. The name you provide here appears in and is referenced within other parts of the ADC.
Applied to VS
This column is read-only and shows the VIP to which the flightPATH rule is applied.
Description
Value representing a description provided for readability purposes.
Steps to add a flightPATH rule
1.     First, click the Add New button located in the Details section.
2.     Enter a name for your rule. Example Auth2
3.     Enter a description of your rule
4.     Once the rule has been applied to a service, you will see the Applied To column auto-populate with an IP address and port value
5.     Don't forget to hit the Update button to save your changes or if you make a mistake, just hit cancel revert to the previous state.
Condition
A flightPATH rule can have any number of conditions. The conditions work on an AND basis allow you to set the condition on which the action is triggered. If you want to use an OR condition, create an additional flightPATH rule and apply it to the VIP in the correct order.
You can also use RegEx by selecting Match RegEx in the Check field and the RegEx value in the Value field. The inclusion of RegEx evaluation extends the capability of flightPATH tremendously.
Creating a new flightPATH condition
Condition
We provide several Conditions as pre-defined within the dropdown and cover all foreseen scenarios. When new Conditions are added, these will be available through Jetpack updates.
Choices available are:
CONDITION
DESCRIPTION
EXAMPLE
<form>
HTML forms are used to pass data to a server
Example "form doesn't have length 0"
GEO Location
Compares the source IP address to the ISO 3166 Country Codes
GEO Location does equal GB, OR GEO Location does equal Germany
Host
Host extracted from the URL
www.mywebsite.com or 192.168.1.1
Language
Language extracted from the language HTTP header
This condition will produce a dropdown with a list of Languages
Method
Dropdown of HTTP methods
Dropdown that includes GET, POST, etc
Origin IP
If upstream proxy supports X-Forwarded-for (XFF) it will use the true Origin address
Client IP. It can also use multiple IPs or subnets. 
10\.1\.2\.* is 10.1.2.0 /24 subnet
10\.1\.2\.3|10\.1\.2\.4 Use | for multiple IP’s
Path
Path of the website
/mywebsite/index.asp
POST
POST request method
Check data being uploaded to a website
Query
Name and value of a query, and can either accept the query name or a value also
"Best=jetNEXUS" Where the Match is Best and the Value is edgeNEXUS
Query String
The whole query string after the ? character
 
Request Cookie
Name of a cookie requested by a  client
MS-WSMAN=afYfn1CDqqCDqUD::
Request Header
Any HTTP Header
Referrer, User-Agent, From, Date
Request Version
The HTTP version
HTTP/1.0 OR HTTP/1.1
Response Body
A user defined string in the response body
Server UP
Response Code
The HTTP code for the response
200 OK, 304 Not Modified
Response Cookie
The name of a cookie sent by the server
MS-WSMAN=afYfn1CDqqCDqUD::
Response Header
Any HTTP Header
Referrer, User-Agent, From, Date
Response Version
The HTTP version sent by the server
HTTP/1.0 OR HTTP/1.1
Source IP
Either the origin IP, proxy server IP, or some other aggregated IP address
Client
IP, Proxy IP, Firewall IP. Can also use multiple IP and subnets. You must escape the dots as these are RegEX. Example 10\.1\.2\.3 is 10.1.2.3
 
Match
The Match field can be either a drop-down or a text value and is definable depending on the value in the Condition field. For example, if the Condition is set to Host, the Match field is not available. If the Condition is set to <form>, the Match field is shown as a text field, and if the Condition is POST, the Match field is presented as a drop-down containing pertinent values.
Choices available are:
MATCH
DESCRIPTION
EXAMPLE
Accept
Content-Types that are acceptable
Accept: text/plain
Accept-Encoding
Acceptable encodings
Accept-Encoding: <compress | gzip | deflate | sdch | identity>
Accept-Language
Acceptable languages for response
Accept-Language: en-US
Accept-Ranges
What partial content range types this server supports
Accept-Ranges: bytes
Authorization
Authentication credentials for HTTP authentication
Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==
Charge-To
Contains account information for the costs of the application of the method requested
 
Content-Encoding
The type of encoding used
Content-Encoding: gzip
Content-Length
The length of the response body in Octets (8-bit bytes)
Content-Length: 348
Content-Type
The mime type of the body of the request (used with POST and PUT requests)
Content-Type: application/x-www-form-urlencoded
Cookie
A HTTP cookie previously sent by the server with Set-Cookie (below)
Cookie: $Version=1; Skin=new;
Date
Date and time at message was originated
Date = “Date” “:” HTTP-date
ETag
An identifier for a specific version of a resource, often a message digest
ETag: “aed6bdb8e090cd1:0”
From
The email address of the user making the request
From: user@example.com
If-Modified-Since
Allows a 304 Not Modified to be returned if the content is unchanged
If-Modified-Since: Sat, 29 Oct 1994 19:43:31 GMT
Last-Modified
The last modified date for the requested object, in RFC 2822 format
Last-Modified: Tue, 15 Nov 1994 12:45:26 GMT
Pragma
Implementation: Specific headers that may have various effects anywhere along the request-response chain.
Pragma: no-cache
Referrer
Address of the previous web page from which a link to the currently requested page was followed
Referrer: HTTP://www.edgenexus.io
Server
A name for the server
Server: Apache/2.4.1 (Unix)
Set-Cookie
A HTTP cookie
Set-Cookie: UserID=JohnDoe; Max-Age=3600; Version=1
User-Agent
The user agent string of the user agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Vary
Tells downstream proxies how to match future request headers to decide
whether the cached response can be used rather than requesting a fresh
one from the origin server
Vary: User-Agent
X-Powered-By
Specifies the technology (e.g. ASP.NET, PHP, JBoss) supporting the web application
X-Powered-By: PHP/5.4.0
 
Sense
The Sense field is a drop-down Boolean field and contains either Does or Doesn't choices.
Check
The Check field allows the setting of check values against the Condition.
Choices available are: Contain, End, Equal, Exist, Have Length, Match RegEx, Match List, Start, Exceed Length
CHECK
DESCRIPTION
EXAMPLE
Exist
This does not care for the detail of the condition just that it does/doesn't exist
Host — Does — Exist
Start
The string starts with the Value
Path — Does — Start — /secure
End
The string ends with the Value
Path — Does — End — .jpg
Contain
The string does contain the Value
Request Header — Accept — Does — Contain — image
Equal
The string does Equal the Value
Host — Does — Equal — www.jetnexus.com
Have Length
The string does have a length of the value
Host — Does — Have Length — 16
www.jetnexus.com = TRUE
www.jetnexus.co.uk = FALSE
Match RegEx
Enables you to enter a full Perl compatible regular expression
Origin IP — Does — Match Regex — 10\..* | 11\..*
 
Steps to add a Condition
Adding a new flightPATH Condition is very easy. An example is shown above.
1.     Click the Add New button within the Condition area.
2.     Choose a condition from the drop-down box. Let's take Host as an example. You can also type into the field, and the ADC will show the value in a drop-down.
3.     Choose a Sense. For example, Does
4.     Choose a Check. For example, Contain
5.     Choose a value. For example, mycompany.com
The above example shows that there are two conditions that both have to be TRUE for the rule to complete
·     The first is checking that the requested object is an image
·     The second checks whether the host in the URL is www.imagepool.com
Evaluation
The ability to add definable variables is a compelling capability. Regular ADC's offer this capability using scripting or command-line options that are not ideal for anyone. The ADC allows you to define any number of variables using an easy-to-use GUI, as shown and described below.
flightPATH variable definition comprises four entries that need to be made.
·     Variable – this is the name of the variable
·     Source – a drop-down list of possible source points
·     Detail – select values from a drop-down or manually typed.
·     Value – the value that the variable holds and can be an alphanumeric value or a RegEx for fine-tuning.
Built-in Variables:
Built-In variables have already been hardcoded, so you do not need to create an evaluation entry for these.
You can use any of the variables listed below in the Action section.
The explanation for each variable is located in the "Condition" table above.
·     Method = $method$
·     Path = $path$
·     Querystring = $querystring$
·     Sourceip = $sourceip$
·     Response code (text also included “200 OK”) = $resp$
·     Host = $host$
·     Version = $version$
·     Clientport = $clientport$
·     Clientip = $clientip$
·     Geolocation = $geolocation$”
ACTION
TARGET
Action = Redirect 302
Target = HTTPs://$host$/404.html
Action = Log
Target = A client from $sourceip$:$sourceport$ has just made a request $path$ page
 
Explanation:
·     A client accessing page that does not exist would ordinarily be presented with the browser’s 404 Error page
·     Instead, the user is redirected to the original hostname they used, but the incorrect path is replaced with 404.html
·     An entry is added to the Syslog saying, "A client from 154.3.22.14:3454 has just requested the wrong.html page."
Action
The next stage in the process is to add an action associated with the flightPATH rule and condition.
In this example, we want to rewrite the path portion of the URL to reflect the URL typed by the user.
·     Click Add New
·     Choose Rewrite Path from the Action drop-down menu
·     In the Target field, type in $path$/myimages
·     Click Update
This action will add /myimages to the path, so the final URL becomes www.imagepool.com/myimages
Applying the flightPATH rule
The application of any flightPATH rule is made within the flightPATH tab of each VIP/VS.
·     Navigate to Services > IP Services and choose the VIP to which you wish to assign the flightPATH rule.
·     You will see the Real Server list shown below
·     Click on the flightPATH tab
·     Select the flightPATH rule you have configured or one of the pre-built ones supported. You can select multiple flightPATH rules if required.
·     Drag and drop the selected set to the Applied flightPATHs section or click the >> arrow button.
·     The rule will be moved to the right side and automatically applied.