Symptoms or Error
??
STAR URL in relaxation rule is blocked after upgrading. The customer upgraded from 9.3_62.4 to 10.5_61.11 and?? START URL is blocked.
In 9.3, it was not blocked. As a result of the problem isolation, we found that the issue occurs when you configure both multiple- defined URL and single-defined URL on 1 profile.
??
??
??
Please see observation regarding the issue:
??
Start URL Relaxation Rule
------------------------------
Defined multiple URL
^https://(zeus|tigris|euphrates)\\.andrew\\.ac\\.jp/(Gakusei|Kyoin)/$
??
Single URL
^http://euphrates\\.andrew\\.ac\\.jp/career2/.*\\.(html|xml)$
??
Observations:
1)
Target??URL:https://euphrates.andrew.ac.jp/gakusei/
??
In case both rules above are enabled,
??
You can access single defined URL below.??http://euphrates.andrew.ac.jp/career2/index.html
??
However, you can't access URL defined for multiple URL's and it is blocked by StartURL.
http://euphrates.andrew.ac.jp/Gakusei/
??
2)
In case you disable single-defined URL, you can access URL defined for multiple URL's??http://euphrates.andrew.ac.jp/Gakusei/
??
??
??
Lab configuration and steps:
1)I am able to reproduce the issue in Lab in 11.0 63.16 build and in customer build.Issue not observed in 10.5 59.11 build.
??
The ip address of the device is 10.107.20.190 nsroot/nsroot
bind appfw profile APPFW_TEST -startURL "^[^?]+[.](cgi|aspx?|jsp|php|pl)([?].*)? $"
bind appfw profile APPFW_TEST -startURL "^https://euphrates\\.andrew\\.ac\\.jp/career2/.*\\.(html|xml)$" -comment "pdf + html + xml files <== pdf removed on 201???????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 2/7/12 by Goto"
add lb vserver APPFW_VIP HTTP 10.107.20.192 80 -persistenceType NONE -Listenpolicy None -cltTimeout 180
bind lb vserver APPFW_VIP APPFW_service
bind lb vserver APPFW_VIP -policyName APPFW_POLICY -priority 100 -gotoPriorityExpression END -type REQUEST
??
??
You can access single defined URL below.??http://euphrates.andrew.ac.jp/career2/index.html
??
However, you can't access URL defined for multiple URL's and it is blocked by StartURL.
http://euphrates.andrew.ac.jp/Gakusei/
??
Solution
??
11.0 | (Checked) | 66_4+ | 3/24/16 5:34:26 AM | (Checked) | NS11.0: Build 66.501.nc | ?? |
10.5 | (Checked) | 62_5+ | 3/24/16 5:50:19 AM | (Checked) | NS10.5: Build 62.7.nc | ?? |
Problem Cause
'detailed_large_pattern_match' function is not returning all possible pending matches for starturl comparison which results in 302 Redirection.
Supporto Citrix
Traduzione automatica
Questo articolo ??¨ stato tradotto da un sistema di traduzione automatica e non ??¨ stata valutata da persone. Citrix fornisce traduzione automatica per aumentare l'accesso per supportare contenuti; tuttavia, articoli automaticamente tradotte possono possono contenere degli errori. Citrix non ??¨ responsabile di incongruenze, errori o danni derivanti dell'uso di articoli automaticamente tradotte.
Citrix技術支持
自動翻譯
這篇文章被翻譯由一個自動翻譯系統,並沒有受到人們的審查。 Citrix提供自動翻譯,增加獲得支持的內容;但是,自動翻譯的文章可能可以包含錯誤。思傑不負責不一致,錯誤或損壞因使用自動翻譯的文章的結果。
Поддержка Citrix
Tradução automática
Эта статья была переведена автоматической системой перевода и не был рассмотрен людьми. Citrix обеспечивает автоматический перевод с целью расширения доступа для поддержки контента; Однако, автоматически переведенные статьи могут может содержать ошибки. Citrix не несет ответственности за несоответствия, ошибки, или повреждения, возникшие в результате использования автоматически переведенных статей.
시트릭스 지원
자동 번역
이 문서 자동 번역 시스템에 의해 번역 된 사람들에 의해 검토되지 않았다. 시트릭스는 컨텐츠를 지원하기 위해 접근을 높이기 위해 자동 번역을 제공합니다; 그러나, 자동으로 번역 기사 오류를 포함 할 수있다. 시트릭스는 자동으로 번역 된 기사의 사용의 결과로 발생하는 불일치, 오류 또는 손해에 대해 책임을지지 않습니다.