F5 301B BIG-IP LTM flashcards
F5 301B BIG-IP LTM · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Virtual server destination
- The IP address and port a virtual server listens on; traffic must match this destination to be processed by that virtual server.
- Wildcard virtual server
- A virtual server listening on 0.0.0.0 or a network address that captures traffic not matched by a more specific virtual server.
- Route domain notation
- An address written with a percent sign, such as 10.1.1.1%2, identifies the address inside a specific route domain partition.
- Automap SNAT
- A source translation mode that uses the self IP of the egress VLAN as the source address for connections to pool members.
- Profile inheritance
- A custom profile inherits unset values from its parent profile, so only explicitly changed settings override the parent behavior.
- OneConnect profile
- Reuses server-side TCP connections across client requests to reduce handshakes, and is incompatible with NTLM authentication unless handled specially.
- HTTP profile X-Forwarded-For
- An HTTP profile option that inserts the client IP into a header so pool members can see the original client address.
- HTTP/2 profile requirement
- The HTTP/2 profile requires an HTTP profile and an SSL profile on the same virtual server and negotiates via ALPN.
- TCP idle timeout
- The TCP profile setting that closes idle connections after a period; the default is 300 seconds.
- Pool member
- A node address plus port that receives traffic from a pool; the same node can appear in several pools on different ports.
- Least Connections method
- A load-balancing method that sends each new connection to the pool member with the fewest active connections at that moment.
- Priority group
- Pool members in the highest active priority group receive all traffic; lower groups are used only when higher groups are down.
- Dynamic Ratio method
- A load-balancing method that weights members by a ratio reported by a monitor, such as a real-server or SNMP monitor.
- Admin state versus monitor state
- Admin state is the operator's enabled or disabled setting; monitor state is the health result. A disabled member gets no traffic regardless of health.
- Source address affinity
- A persistence method that hashes the client IP, with a default host mask of 255.255.255.255, so the same client returns to the same member.
- Cookie persistence
- A persistence method where the BIG-IP inserts a cookie encoding the chosen member, and later requests carrying that cookie return to it.
- SSL session ID persistence
- A persistence method keyed on the TLS session ID; it fails when clients renegotiate or do not reuse session IDs.
- Universal persistence
- A persistence method where an iRule computes the key from any request data and stores it in a persistence table.
- SIP persistence
- A persistence method that keys on the Call-ID header in SIP messages, keeping a call's requests on the same member.
- Persistence timeout
- The idle period after which a persistence record expires; source address persistence defaults to 180 seconds.
- Monitor binding precedence
- A monitor bound at member level overrides a pool-level monitor, and a node-level monitor applies to all members on that node.
- Monitor failure threshold
- The number of consecutive failed probes before a member is marked down; the default is three failures at the configured interval.
- HTTP monitor receive string
- A string the monitor expects in the server response; if the string is absent the probe fails and the member is marked down.
- Action On Service Down
- A pool setting that controls behavior when all members are down: None, Reject, Drop, or Reselect another pool.
- Transparent monitor
- A monitor option that sends probes using the client's source address instead of the BIG-IP self IP, useful when servers filter by source.
- Client SSL profile
- The profile that terminates TLS from the client on the BIG-IP, referencing the certificate and key used for the handshake.
- Server SSL profile
- The profile that originates TLS from the BIG-IP to the pool member, re-encrypting traffic after client-side termination.
- Client certificate require
- A client SSL profile setting that rejects any client that does not present a valid certificate during the TLS handshake.
- SNI on virtual server
- Server Name Indication lets one virtual server select among multiple certificates; the default profile applies when the client sends no SNI.
- iRule HTTP_REQUEST event
- The event where request headers and URI are available and where pool selection or URI rewriting is typically performed.
- iRule persist command
- An iRule command that creates or reads a persistence record using a key computed from request data.
- iRule class match
- A command that looks up a value in a data group, commonly used to route by source address or URI.