5

I'm looking to move from F5 to Netscaler and having a hard time figuring out if Netscalers have a feature similar to iRules.

cagenut
  • 4,848
  • 2
  • 24
  • 29
GeorgeU
  • 506
  • 1
  • 5
  • 17

3 Answers3

5

Yes. I don't think they have a brand name for it like F5 does, they just call them "policy" like a content-switching policy or a rewrite-policy, etc.

cagenut
  • 4,848
  • 2
  • 24
  • 29
  • I can't seem to find this similar to an `iRule` thing called "policy". I am looking for a place where I can script my workflow in a single file and all I can find is a ton of spread out GUIs that depend on each other. – DavidGamba Feb 23 '15 at 23:08
  • Netscaler tried to make their version of F5's iRules to be more GUI-friendly (believing that this equates to "ease of use"). I've not used iRules before, but I would hesitate to try and do something in Netscaler (eg. header rewrite) that I could do easily with a single line of config in Apache httpd. Blech. – Cameron Kerr Apr 24 '15 at 11:13
  • There are 'policies' and 'actions'. Think of one being like the condition of an `if` statement, and the other being the consequent statement. And they all have names that you need to give them. – Cameron Kerr Apr 24 '15 at 11:16
  • cagenut is spot on. They are just referred to as policies and as stated there will be multiple policies for different things. This is one of the tough parts to get through. – Shawn Moriarty Nov 09 '10 at 21:05
2

I have been trying to find how to migrate my iRules to a Netscaler and I can't seem to find an easy way.

I found this conversation that says:

  • There is no denying it, F5 irules are MUCH easier and cleaner then the Netscaler policy-based rules, at least from a management/configuration point of view. In my opinion, this is the one downfall of the netscaler, and the one area that Citrix really should be looking to correct if they want to make that next step past F5. A irule person who is use to having everything in once spot will initially find the netscaler confusing, and probably messy. Instead of having one irule, you now need to configure content swithcing policies, responder policies and actions, and rewrite policies and actions, all contained in different areas in the config GUI (you will find yourself flipping between screens a lot, and it will get frustrating).

    ...

  • iRules are now CS Policies, Rewrite Policies/Actions, and Responder Policies/Actions, all of which use a proprietary expression language that Citrix call AppExpert

It goes on to say that on the bright side, the netscaler is quite flexible but I think the right answer to this question is to say there is no feature equivalent to the iRule, as in a single script where you put all your rules, but the rules themselves have equivalents.

The way I have worked with the iRules is to create a rule to make my company's software work properly and then distribute that rule to the sites that make use of our software. From my early review of the Netscaler, there won't be an easy way to distribute my configuration to different sites.

EDIT:

So far, the closest I have found, is to put my tasks into a file and load them through the Netscaler CLI using batch -f <tasks.conf> though I still feel this approach is not as good as an iRule and haven't fully migrated my iRules yet.

I will start looking into the Nitro API.

DavidGamba
  • 306
  • 2
  • 8
1

Have you considered looking at the Citrix website? https://www.citrix.com/go/citrix-developer/netscaler-developer-community/irules-conversion-guides.html

Mr. Marcus
  • 21
  • 1