Technical data

ServerIron ADX Graphical User Interface Guide 81
53-1002412-01
Content switching
7
• String Ends With: Specifies the string that should match with the string present at the end
of response sent by the real server. Select String Ends With, and enter the string in the
Ends String field.
• Select Simple String Match and enter the following details:
 Matches: Enter the string.
 Logging: Select the Enable check box.
• Select Compound String Match and enter the following details:
 Starts With: Enter the string that must match with the beginning string of response
sent by the real server.
 Ends With: Enter the string that must match with the string present at the end text of
the of response sent by the real server.
 Logging: Select the Enable check box to enable logging when the selection criteria is
met.
6. Click Add to add a rule.
The added rule is displayed in the Added Rules table. You can click Delete to delete the rule
from the table.
7. Rep ea t step 5 to step 6 to define additional match conditions.
8. Click Apply to save your entries.
Click Reset to revert the configuration to the previous configured values.
The configured match list is displayed in the Match Lists table. Select the match list policy in
the table and click Edit or double-click the entry to modify the match list. Also, click Delete to
delete the match list from the table.
For more information on configuring match lists, refer to the ServerIron ADX Server Load Balancing
Guide.
Content switching
Content switching allows the ADX device to make forwarding decisions about HTTP traffic based on
information in a URL, cookie, SSL session ID, or XML content. In addition, Layer 7 content switching
allows the device to make forwarding decisions about HTTP traffic by analyzing information
contained within the traffic.
In addition, the device can perform content rewrite on the server responses. In other words, the
device can not only modify requests in the forward direction, but also the responses in reverse
direction.
The device also provides protection against distributed denial of service attacks such as Domain
Name System (DNS) amplification attacks. The device can be configured to forward, drop or rate
limit DNS traffic based on DNS query name, DNS query type, and DNS recursion flag.
Creating content switching policies
Configuring Layer 7 content switching policy includes the following: