Training offering

Developing iRules for BIG-IP


Price £2,495 before tax
Length: 3 Days
Lunch : Included
Courseware : Included
Course code: F5N_BIG-IRULE-CFG
Delivery Type

Session dates

Date Location
  • Chertsey
    £2,495 before tax
  • London - Dowgate Hill
    £2,495 before tax
  • Virtual Classroom (GMT / UTC)
    £2,495 before tax
  • London - Dowgate Hill
    £2,495 before tax
  • Virtual Classroom (GMT / UTC)
    £2,495 before tax
  • London - Dowgate Hill
    £2,495 before tax
  • Virtual Classroom (GMT / UTC)
    £2,495 before tax
  • London - Dowgate Hill
    £2,495 before tax
  • Virtual Classroom (GMT / UTC)
    £2,495 before tax
This training is also available as onsite training. Feel free to contact us for more information.


This 3 day course provides networking professionals a functional understanding of iRules development.

The course builds on the foundation of the Administering BIG-IP course, demonstrating how to logically plan and write iRules to help monitor and manage common tasks involved with processing traffic on the BIG-IP system. Extensive course labs consist of writing, applying and evaluating the effect of iRules on local traffic.

This hands-on course includes lectures, labs, and discussions.


Topics covered in this course include:

• Setting up the BIG-IP system
• Getting started with iRules
• Using the iRules Editor
• Leveraging DevCentral resources for iRule development
• Exploring iRule elements, including events, functions, commands, variables, and operators
• Using control structures for conditional branching and looping
• Mastering whitespace, grouping, and special symbols
• Testing and troubleshooting iRules
• Logging from an iRule using syslog-ng and high-speed logging (HSL)
• Optimizing iRules execution, including implementing efficiency best practices
• Modularizing iRules for administrative efficiency, including using procedures
• Securing web applications with iRules, including preventing common HTTP attacks, securing HTTP headers and cookies, and implementing strict transport security (HSTS)
• Working with strings, including using Tcl parsing commands and iRules parsing functions
• Accessing and manipulating HTTP traffic, including applying selective HTTP compression
• Working with iFiles and data groups
• Using iRules with universal persistence and stream profiles
• Gathering statistics using a statistics profile and STATS commands, and iStats
• Incorporating advanced variables, including arrays, static variables, and the session table


This course is intended for system administrators, network administrators and application developers responsible for the customization of traffic flow through a BIG-IP system.


Students must complete one of the following F5 prerequisites before attending this course:

•    Administering BIG-IP instructor-led course
•    Configuring BIG-IP LTM instructor-led course
•    F5 Certified BIG-IP Administrator


F5 US has brought out a BIG-IP Admin exam which can be taken before attending the LTM course.  Indeed, this test should be taken by anyone wanting to attend any of the F5 specialist classes (DNS, APM, ASM, AFM etc.) if they have not attended the BIG-IP Admin or LTM class.

Although this is not mandatory, F5 would like to stress the importance of anyone attending F5 specialist classes if they have not attended an Admin class or passed the test below with 70% or greater.  Obviously, a 201 BIG-IP Administrator exam certification is an instant prerequisite.

Step 1: get an account on F5 University (

Step 2: goto:

Take the test.  Pass mark is 70%.

Step 3: take a screen shot as proof of your results.

Please note that if this prerequisite is not met, Arrow ECS reserves the right to refuse entry to the class without refund.

The following free web-based courses, although optional, will be very helpful for any student with limited BIG-IP administration and configuration experience:

•    Getting Started with BIG-IP web-based training
•    Getting Started with BIG-IP Local Traffic Manager (LTM) web-based training

The following general network technology knowledge and experience are recommended before attending any F5 Global Training Services instructor-led course:

•    OSI model encapsulation
•    Routing and switching
•    Ethernet and ARP
•    TCP/IP concepts
•    IP addressing and subnetting
•    NAT and private IP addressing
•    Default gateway
•    Network firewalls
•    LAN vs. WAN

The following course-specific knowledge and experience is suggested before attending this course:

•    HTTP protocol
•    Any programming language


Chapter 1: Setting Up the BIG-IP System

• Introducing the BIG-IP System
• Initially Setting Up the BIG-IP System
• Archiving the BIG-IP System Configuration
• Leveraging F5 Support Resources and Tools
• Chapter Resources
• BIG-IP System Setup Labs

Chapter 2: Getting Started with iRules

• Customizing Application Delivery with iRules
• Triggering an iRule
• Leveraging the DevCentral Ecosystem
• Using the F5 iRule Editor
• Assigning and Testing iRules

Chapter 3: Exploring iRule Elements

• Introducing iRule Constructs
• Understanding iRule Events and Event Context
• Working with iRule Commands
• Logging from an iRule Using SYSLOG-NG

• Working with User-Defined Variables
• Working with Operators and Data Types
• Working with Control Structures

• Incorporating Best Practices in iRules

Chapter 4: Developing and Troubleshooting iRules

• Mastering Whitespace and Special Symbols
• Developing and Troubleshooting Tips
• Using Fiddler to Test and Troubleshoot iRules

Chapter 5: Optimizing iRule Execution

• Understanding the Need for Efficiency
• Measuing iRule Runtime Efficiency
• Modularizing for Administrative Efficiency
• Using Procedures to Modularize Code
• Optimizing Logging
• Using High-Speed Logging Commands in an iRule
• Implementing Other Efficiency Recommendations
• Using Looping Control Structures (Iteration)


Chapter 6: Securing Web Applications with iRules

• Integrating iRules into Web Application Defense
• Preventing Common HTTP Attacks

Mitigating HTTP Version Attacks
Mitigating Path Traversal Attacks
Using iRules to Defend Against Cross-Site Request Forgery (CSRF)
Mitigating HTTP Method Vulnerabilities
Securing HTTP Cookies with iRules
Adding HTTP Security Headers
            X-Frame-Options
            X-XSS-Protection
            X-Content-Type-Options
            Strict-Transport-Security
Removing Undesirable HTTP Headers

Chapter 7: Working with Numbers and Strings

• Understanding Number Forms and Notation
• Working with Strings

Parsing Strings
Combining Strings
 Combining Strings with Adjacent Variables
iRule String Parsing Functions

Chapter 8: Processing the HTTP Payload

• Reviewing HTTP Headers and Commands
• Accessing and Manipulating HTTP Headers
• Parsing the HTTP URI
• Selectively Compressing HTTP Data

Chapter 9: Working with iFiles and Data Groups

• Working with iFiles
• Introducing Data Groups
• Working with Old Format Data Groups (Classes)

• Working with New Format Data Groups

Creating an Internal Data Group
Creating an External Data Group
CLASS Command Options
Other CLASS Commands

Chapter 10: Using iRules with Universal Persistence, Stream, and Statistics Profiles

• Implementing Universal Persistence

• Working with the Stream Profile

• Gathering Custom Statistics from an iRule

Collecting Statistics Using a Statistics Profile
 Configuring a Statistics Profile
 Viewing iRule-Collected Statistics
Collecting Statistics Using iStats

Chapter 11: Working with Advanced Variables

• Reviewing the Local Variable Namespace
• Working with Arrays

 Building a Static Array
 Accessing a Specific Key's Value
 Building a Dynamic Array
 Looping Through an Array
• Using Static and Global Variables
• Using the Session Table



Would you like additional access to F5 labs after you have attended your training course?


Arrow Education has just launched a new lab access and support offering.


Please click here for more details or call 0870 251 1000.

© 2018 Qual - Arrow ECS. All rights reserved.