Coyote Point Systems Equalizer GX Series, Administration Manual

Page: 397 / 866

Match Rule Definitions
Match rules are defined in the file
/var/eq/eq.conf
with the definition of the cluster to which the
match rule applies. A match rule as it appears in
eq.conf
looks like the following example:
match ma01 {
client_ip("10.0.0.19")
} then {
flags =!spoof;
srvpool = sv_01;
}
In this example (the match rule is named “ma01”), the match function,
client_ip
, has an argument
that matches all requests from IP address 10.0.0.19, which are all sent to server sv_01.
Additionally, this rule disables the
spoof
flag (that is, when the connection is made to the server,
the server sees a connection to the Equalizer, not to the client). This is displayed as follows:
The
Expression
field shows the expression that is evaluated against the incoming request. If the
expression evaluates to true , the Server Pool field specifies the "pool" of servers that will be used
to satisfy the incoming request, as well as the options that will be set for the request.
Refer to
"Managing Server Pools"
on page 430
Match Rule Expression Examples
A match rule expression must be specified in double quotes, so any quotes used in a function to
delineate strings must be escaped with a backslash character (
\
), as in this example that matches
all client requests with a source IP on the 10.10.10/24 network:
expression “client_ip(\“10.10.10/24\”)”
Functions can be negated using the “!” operator. To change the above example to match all client
requests with a source IP
not on the 10.10.10/24 network, use this expression:
Copyright © 2014 Coyote Point Systems, A Subsidiary of Fortinet, Inc.
All Rights Reserved. 397
Equalizer Administration Guide