{
	"variables": [],
	"info": {
		"name": "AppSvcs_iApp_Workflows",
		"_postman_id": "5e257d05-0f8c-3924-6372-dd7143144256",
		"description": "Version: {{version}}",
		"schema": "https://schema.getpostman.com/json/collection/v2.0.0/collection.json"
	},
	"item": [
		{
			"name": "1_Install_on_BIGIP",
			"description": "This request in this folder will install the appsvcs_integration_iapp iApp template on an F5 BIG-IP device.\n\nInput Variables:\n\nbigip_mgmt\t\tF5 BIG-IP Management Address\nbigip_token\t\tREST API Authentication Token\n\nOutput Variables:\n\nappsvcs_name\tName of the installed template",
			"item": [
				{
					"name": "Install AppSvcs Template on BIG-IP",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"name\",",
									"            \"value\":\"/appsvcs_integration_v.*/i\",",
									"            \"op\":\"regex\"",
									"        }",
									"    ];",
									"        ",
									"    var populate_vars = [",
									"        {",
									"            \"name\":\"appsvcs_name\",",
									"            \"value\":\"name\"",
									"        }",
									"    ];",
									"        ",
									"    f5_check_response(check_vals);",
									"    f5_populate_env_vars(populate_vars);",
									"} else {",
									"    postman.setEnvironmentVariable('appsvcs_name', 'appsvcs_integration_v2.0.003');",
									"}"
								]
							}
						}
					],
					"request": {
						"url": " https://{{bigip_mgmt}}/mgmt/tm/sys/application/template",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{bigip_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\"name\": \"appsvcs_integration_v2.0.003\", \"actions\": [{\"name\": \"definition\", \"htmlHelp\": \"\", \"implementation\": \"# Copyright (c) 2017 F5 Networks, Inc.\\n#\\n# Licensed under the Apache License, Version 2.0 (the \\\"License\\\");\\n# you may not use this file except in compliance with the License.\\n# You may obtain a copy of the License at\\n#\\n#     http://www.apache.org/licenses/LICENSE-2.0\\n#\\n#     Unless required by applicable law or agreed to in writing, software\\n#     distributed under the License is distributed on an \\\"AS IS\\\" BASIS,\\n#     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\\n#     See the License for the specific language governing permissions and\\n#     limitations under the License.\\n#\\npackage require base64\\n\\nset startTime [clock seconds]\\nset bundler_timestamp [clock format $startTime -format {%Y%m%d%H%M%S}]\\n\\nset NAME \\\"F5 Application Services Integration iApp (Community Edition)\\\"\\nset TMPLNAME \\\"appsvcs_integration_v2.0.\\\"\\nset IMPLMAJORVERSION \\\"2.0\\\"\\nset IMPLMINORVERSION \\\"003\\\"\\nset IMPLVERSION [format \\\"%s.%s\\\" $IMPLMAJORVERSION $IMPLMINORVERSION]\\nset POSTDEPLOY_DELAY 0\\n\\nif { [tmsh::get_field_value [lindex [tmsh::get_config sys scriptd log-level] 0] log-level] eq \\\"debug\\\" } {\\n  set iapp__logLevel 10\\n}\\n\\n# Print a timestamped debug message to /var/tmp/scriptd.out\\n# Input: headers = TCL list of headers for the log message\\n#        msg = The message to log\\n#        level = Integer indicated the log level for this message\\nproc debug { headers msg level } {\\n  if { $::iapp__logLevel >= $level } {\\n    set systemTime [clock seconds]\\n    set brackets \\\"\\\"\\n    if { [llength $headers] > 0 } {\\n      set brackets [format \\\"\\\\[%s\\\\]\\\" [join $headers \\\"\\\\]\\\\[\\\"]]\\n    }\\n    set pre [format \\\"\\\\[%s %s\\\\]\\\\[%s\\\\]%s\\\" [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S] $::app $brackets]\\n    puts [format \\\"%s %s\\\" $pre [string map [list \\\"\\\\n\\\" \\\"\\\\n$pre \\\" ] $msg]]\\n  }\\n}\\n\\n# Credit for psplit: http://wiki.tcl.tk/1499\\n# Perform the equivalent of a split on a string except protect an escaped split character in the input\\n# Input: str = the string to split\\n#        seps = the charater(s) to split by\\n# Return: list $strings\\nproc psplit { str seps {protector \\\"\\\\\\\\\\\"}} {\\n    set out [list]\\n    set prev \\\"\\\"\\n    set current \\\"\\\"\\n    foreach c [split $str \\\"\\\"] {\\n        if { [string first $c $seps] >= 0 } {\\n            if { $prev eq $protector } {\\n                set current [string range $current 0 end-1]\\n                append current $c\\n            } else {\\n                lappend out $current\\n                set current \\\"\\\"\\n            }\\n            set prev \\\"\\\"\\n        } else {\\n            append current $c\\n            set prev $c\\n        }\\n    }\\n\\n    if { $current ne \\\"\\\" } {\\n        lappend out $current\\n    }\\n\\n    return $out\\n}\\n\\n# Figure out which type of environment we are executing in.\\n# Return: list $mode $folder $partition $routedomainid $newdeploy\\n# Modes: 1 = Standalone\\n#        2 = iWorkflow\\n#        3 = Cisco APIC\\n#        4 = VMware NSX\\nproc get_mode { } {\\n  set folder [tmsh::pwd]\\n  set app $tmsh::app_name\\n  set partition [lindex [split $folder /] 1]\\n  set newdeploy [catch {tmsh::get_config sys application service /$partition/$app.app/$app}]\\n  debug [list get_mode] [format \\\"starting folder=%s partition=%s newdeploy=%s\\\" $folder $partition $newdeploy] 10\\n\\n  if { ! $newdeploy } {\\n    set ::asoobj [lindex [lindex [tmsh::get_config sys application service /$partition/$app.app/$app] 0] 4]\\n  }\\n  # Set the routedomain to the partition default-route-domain\\n  if { [string tolower $::iapp__routeDomain] eq \\\"auto\\\"} {\\n    set obj [tmsh::get_config auth partition $partition default-route-domain]\\n    set routedomainid [tmsh::get_field_value [lindex $obj 0] default-route-domain]\\n    debug [list get_mode set_route_domain] [format \\\"Using partition default-route-domain; routedomainid=%s\\\" $routedomainid] 10\\n  } else {\\n    set routedomainid $::iapp__routeDomain\\n    debug [list get_mode set_route_domain] [format \\\"Using route domain override; routedomainid=%s\\\" $routedomainid] 10\\n  }\\n\\n  # Check for a mode override in $iapp__mode variable\\n  if { [string tolower $::iapp__mode] ne \\\"auto\\\" } {\\n    if { $::iapp__mode > 0 && $::iapp__mode < 4 } {\\n      debug [list get_mode mode_override] [format \\\"Mode override detected.  Setting mode to %s\\\" $::iapp__mode] 10\\n      return [list $::iapp__mode $folder $partition $routedomainid $newdeploy]\\n    } else {\\n      error \\\"The mode override specified is invalid.\\\"\\n    }\\n  }\\n\\n  # Check for a partition that starts with apic_ and return APIC mode (3) and RD if found\\n  if { [string match -nocase \\\"apic_*\\\" $partition] || [string match -nocase \\\"apic-*\\\" $partition] } {\\n    debug [list get_mode apic] \\\"partition starts with apic_, assuming APIC deployment mode (3)\\\" 10\\n    set rdobjs [tmsh::get_config net route-domain \\\"/$partition/$partition\\\" id]\\n    set routedomainid [tmsh::get_field_value [lindex $rdobjs 0] \\\"id\\\"]\\n    debug [list get_mode apic] [format \\\"rdobjs=%s routedomainid=%s\\\" $rdobjs $routedomainid] 10\\n    return [list 3 $folder $partition $routedomainid $newdeploy]\\n  }\\n\\n  # Check for an $app name that is formatted like this:\\n  # edge-<#>_<#>_virtualserver-<#>-serviceprofile-<#>\\n  # and return NSX mode (4)\\n  if { [regexp -nocase {^edge-[0-9]+_[0-9]+_virtualserver-[0-9]+-serviceprofile-[0-9]+$} $::app] } {\\n    debug [list get_mode nsx] \\\"app name matches NSX regexp, assuming NSX deployment mode (4)\\\" 10\\n    return [list 4 $folder $partition $routedomainid $newdeploy]\\n  }\\n\\n  # If we get here we can safely assume that this is either a Standalone or iWorkflow mode deployment\\n  # The only way we currently have to check for iWorkflow mode is to see if app_stats was sent\\n  if { [info exists ::app_stats] } {\\n    debug [list get_mode iworkflow] \\\"all other modes checked for and app_stats set, assuming iWorkflow deployment mode (2)\\\" 10\\n    return [list 2 $folder $partition $routedomainid $newdeploy]\\n  }\\n\\n  # Default is Standalone mode\\n  debug [list get_mode standalone] \\\"no integration vendor found, assuming Standalone deployment mode (1)\\\" 10\\n  return [list 1 $folder $partition $routedomainid $newdeploy]\\n}\\n\\n# Create a specfic option command and return it\\n# Input: $debug_id, $input_var, $option_string\\n# Return: string $cmd\\nproc generic_add_option { debug_id input_var option_string custom_format replace_commas } {\\n  set cmd \\\" \\\"\\n  if { [string length $input_var] > 0 } {\\n      if { $replace_commas == 1 } {\\n        set input_var [string map {\\\",\\\" \\\" \\\"} $input_var]\\n      }\\n\\n      if { [string length $custom_format] > 0 } {\\n        set cmd [format $custom_format $input_var]\\n      } else {\\n        set cmd [format \\\" $option_string \\\\\\\"%s\\\\\\\"\\\" $input_var]\\n      }\\n      debug [lappend debug_id generic_add_option] [format \\\"cmd=%s\\\" $cmd] 10\\n  }\\n  return $cmd\\n}\\n\\n# Check to see if an ip has a routedomain included.\\n# Return: 0=false; 1=true\\nproc has_routedomain { ip } {\\n  return [string match *%* $ip]\\n}\\n\\n# Replace a profile within a virtual server definition while preserving the existing context\\n# Input: $obj = tmsh obj representing profiles section of the VS get_config\\n#        $oldprofile = name of the profile to replace\\n#        $newprofile = name of the new profile\\n# Return: string $newprofiles (string suitable for providing to replace-all-with option)\\nproc replace_profile { obj oldprofile newprofile } {\\n  set profiles [tmsh::get_field_value [lindex $obj 0] \\\"profiles\\\"]\\n  set newprofiles \\\" { \\\"\\n  foreach profile $profiles {\\n      set junk [lindex $profile 0]\\n      set name [lindex $profile 1]\\n      set contextobj [lindex $profile 2]\\n      set context [lindex $contextobj 1]\\n      if { $name eq $oldprofile } {\\n          debug [list replace_profile] [format \\\"replace profile '%s' with '%s' context=%s\\\" $name $newprofile $context] 10\\n          append newprofiles [format \\\"%s { context %s } \\\" $newprofile $context]\\n      } else {\\n          debug [list replace_profile] [format \\\"preserve profile '%s' context=%s\\\" $name $context] 10\\n          append newprofiles [format \\\"%s { context %s } \\\" $name $context]\\n      }\\n  }\\n  append newprofiles \\\" } \\\"\\n  return $newprofiles\\n}\\n\\n# Look at a tmsh profile object and determine if $option is a valid profile option\\n# Input: $obj = tmsh obj to check\\n#        $option = option name to look for\\n# Return: 1=Valid option; 0=Invalid option\\nproc is_valid_profile_option { obj option } {\\n    debug [list is_valid_profile_option obj] [format \\\"%s\\\" $obj] 11\\n    debug [list is_valid_profile_option option] [format \\\"looking for %s\\\" $option] 11\\n    set found 0\\n    set fdx 0\\n    set fields [tmsh::get_field_names value $obj]\\n    set fields2 [tmsh::get_field_names nested $obj]\\n    debug [list is_valid_profile_option fields] [format \\\"%s\\\" $fields] 11\\n    debug [list is_valid_profile_option fields2] [format \\\"%s\\\" $fields2] 11\\n    set field_count [llength $fields]\\n    while { $fdx < $field_count } {\\n        set field [lindex $fields $fdx]\\n        if { $field == $option } {\\n          return 1\\n        }\\n        incr fdx\\n    }\\n    set field_count [llength $fields2]\\n    set fdx 0\\n    while { $fdx < $field_count } {\\n        set field [lindex $fields2 $fdx]\\n        if { $field == $option } {\\n          return 1\\n        }\\n        incr fdx\\n    }\\n    return 0\\n}\\n\\n# Process a string in the format key1=val1[;keyX=valX] and return an array\\n# Input: $string = string to process\\n# Return: array { key1 {val1} ... keyX{valX}}\\nproc process_kvp_string { string } {\\n  debug [list process_kvp_string] \\\"processing string: $string\\\" 10\\n  set pairs [psplit $string \\\";\\\"]\\n  array set ret {}\\n  foreach pair $pairs {\\n    set key [lindex [split $pair =] 0]\\n    set val [lindex [split $pair =] 1]\\n    set ret($key) $val\\n    debug [list process_kvp_string] \\\"pair=$pair key=$key val=$val\\\" 10\\n  }\\n  return [array get ret]\\n}\\n\\n# Create an object name\\n# Input: $append = string to append\\n# Return: $string\\nproc create_obj_name { append } {\\n  return [format \\\"%s/%s_%s\\\" $::app_path $::app $append]\\n}\\n\\n# Safely change a variable to a new value.  Updates the var value and modifies the ASO with the new value\\n# Input: $name = name of variable\\n#       $value = new value of the variable\\n# Return: none\\nproc change_var { name value } {\\n  debug [list change_var] \\\"updating variable $name to $value (executes post-deployment)\\\" 10\\n  set varcmd [create_escaped_tmsh [format \\\"tmsh::modify sys application service %s/%s variables modify \\\\{ %s \\\\{ value \\\\\\\"%s\\\\\\\" \\\\} \\\\}\\\" $::app_path $::app $name $value]]\\n  debug [list change_var tmsh_modify_deferred] $varcmd 1\\n  lappend ::postfinal_deferred_cmds $varcmd\\n  set [subst ::$name] $value\\n  set ::aso_config($name) $value\\n  return\\n}\\n\\n# Check to see if an incoming variable is different than whats stored in the ASO.\\n# Input: $name = name of variable\\n# Return: 1=value is different; 0=value not different OR not a redeploy\\nproc is_new_value { name } {\\n  if { $::newdeploy } {\\n    return 0\\n  }\\n  set varvalue [get_var $name]\\n  debug [list is_new_value] [format \\\"name=%s asovalue=%s varvalue=%s\\\" $name $varvalue [set [subst ::$name]]] 10\\n  if { [set [subst ::$name]] == $varvalue } {\\n    return 0\\n  }\\n  return 1\\n}\\n\\n# Get the variable value in the ASO.\\n# Input: $name = name of variable\\n#        $orig = return the original value, not the runtime updated one\\n# Return: $string = value of variable\\nproc get_var { name { orig 0 }} {\\n  if { $::newdeploy == 1} {\\n    return \\\"\\\"\\n  }\\n  debug [list get_var] [format \\\"start name=%s\\\" $name] 10\\n\\n  if { $orig == 0 && [info exists ::aso_config($name)] } {\\n    set varvalue $::aso_config($name)\\n    debug [list get_var] [format \\\"name=%s value=%s\\\" $name $varvalue] 10\\n    return $varvalue\\n  }\\n\\n  if { $orig == 1 && [info exists ::aso_config_orig($name)] } {\\n    set varvalue $::aso_config_orig($name)\\n    debug [list get_var original] [format \\\"name=%s value=%s\\\" $name $varvalue] 10\\n    return $varvalue\\n  }\\n  return \\\"\\\"\\n}\\n\\n# Safely handle the removal of a virtual server option on redeployment\\n# Input: $name = name of variable\\n#        $checkvalue = the string that disables the option\\n#        $option = TMSH name of the option\\n#        $module = the BIG-IP module that enables the option\\n# Return: 1=Option removed; 0=no action taken\\nproc handle_opt_remove_on_redeploy { name checkvalue option module } {\\n  if { ! $::redeploy || $::pool__addr eq \\\"255.255.255.254\\\" } {\\n    debug [list handle_opt_remove_on_redeploy $name] \\\"not a redeployment, skipping\\\" 10\\n    return 0\\n  }\\n\\n  if { ! [is_provisioned $module] } {\\n    debug [list handle_opt_remove_on_redeploy $name] [format \\\"%s not provisioned, skipping\\\" $module] 10\\n    return 0\\n  }\\n\\n  set vsname [get_var vs__Name 1]\\n  set vsobj [lindex [tmsh::get_config ltm virtual $::app_path/$vsname all-properties] 0]\\n  if { [is_valid_profile_option $vsobj $option] == 0 } {\\n    debug [list handle_opt_remove_on_redeploy $name] [format \\\"%s not available, skipping\\\" $option] 10\\n    return 0\\n  }\\n\\n  if { [set [subst ::$name]] == $checkvalue && \\\\\\n       [is_new_value $name] && \\\\\\n       $::redeploy } {\\n        debug [list handle_opt_remove_on_redeploy] [format \\\"%s %s on redeploy, setting %s to none\\\" $name $checkvalue $option] 10\\n        set cmd [format \\\"ltm virtual %s/%s %s none\\\" $::app_path $vsname $option]\\n        debug [list handle_opt_remove_on_redeploy tmsh_modify] $cmd 1\\n        tmsh::modify $cmd\\n        return 1\\n  }\\n  return 0\\n}\\n\\n# Check provisioning cache for whether a specified module is provisioned and at what levels\\n# Adapted from original code including the F5 iApp TCL helper library\\n# Input: $module = name of the module\\n# Output: $level = integer representation of the provisioning level.  See levels array below\\nproc is_provisioned { module } {\\n  array set levels {\\n    none      0\\n    minimum   1\\n    nominal   2\\n    dedicated 3\\n  }\\n\\n  if { [info exists ::__provision_cache($module)] } {\\n    debug [list is_provisioned cache_hit] \\\"$module $::__provision_cache($module)\\\" 10\\n    return [expr { $levels($::__provision_cache($module)) >= 1 }]\\n  } else {\\n    debug [list is_provisioned cache_miss] \\\"$module\\\" 10\\n    return -1\\n  }\\n}\\n\\n# Load provisioning cache with module provisioning levels\\n# Adapted from original code including the F5 iApp TCL helper library\\nproc load_provisioned { } {\\n  array set levels {\\n    none      0\\n    minimum   1\\n    nominal   2\\n    dedicated 3\\n  }\\n  set obj [tmsh::get_config sys provision]\\n  foreach mod $obj {\\n    set modname [lindex $mod 2]\\n    set modlevel [lindex $mod 3]\\n    if { [llength $modlevel] == 2 } {\\n      set modlevel [lindex $modlevel 1]\\n    } else {\\n      set modlevel none\\n    }\\n    set ::__provision_cache($modname) $modlevel\\n    debug [list load_provisioned cache_set] \\\"$modname $modlevel\\\" 10\\n  }\\n}\\n\\n# Consume an APL table and return a list containing the values of the var specified in $key\\n# Input: $table = the raw APL table\\n#        $key = the name of the variable to add to the return list\\n# Output: $retlist = A list of strings\\nproc single_column_table_to_list { table key } {\\n  set retlist {}\\n  foreach row $table {\\n    array unset column\\n\\n    # extract the iApp table data - borrowed from f5.lbaas.tmpl\\n    foreach column_data [lrange [split [join $row] \\\"\\\\n\\\"] 1 end-1] {\\n      set name [lindex $column_data 0]\\n      set column($name) [lrange $column_data 1 end]\\n    }\\n    if { [info exists column($key)] && [string length $column($key)] > 0 } {\\n      lappend retlist \\\"$column($key)\\\"\\n    }\\n\\n  }\\n  return $retlist\\n}\\n\\n# Process a string in the format <option>[=<value>][;<option2>[=<value2>]] and return a\\n# properly formatted TMSH string.  If $tmsh is specified than options will be verified\\n# using the object in $template.  This works for things like profiles, but not virtual\\n# servers.  Specifying no value for $tmsh turns off checking\\n# Input: $option_str = string to process\\n#        $tmsh = the portion of the tmsh command get a list of all-properties\\n#        $template = the object name to use as a list of available options\\n#        $add_default = add a 'defaults-from' option using the value of $template\\n#                       if not found in the string\\nproc process_options_string { option_str tmsh template {add_default 0} } {\\n  debug [list process_options_string] [format \\\"option_str=%s tmsh=%s template=%s add_default=%s\\\" $option_str $tmsh $template $add_default] 10\\n  set ret \\\"\\\"\\n\\n  # Get all the options passed in array format\\n  array set options [process_kvp_string $option_str]\\n\\n  if { $add_default && ![info exists options(defaults-from)] } {\\n    debug [list process_options_string add_default] \\\"defaults-from $template\\\" 10\\n    set options(defaults-from) $template\\n  }\\n\\n  # Get the supported options for a profile type\\n  foreach {option value} [array get options] {\\n    if { [string length $tmsh] > 0 } {\\n      set profileobj [lindex [tmsh::get_config ltm $tmsh $template all-properties] 0]\\n      if { [is_valid_profile_option $profileobj $option] == 0 } {\\n        error \\\"The option \\\\\\\"$option\\\\\\\" for $tmsh is not valid\\\"\\n      }\\n    }\\n\\n    # Handle options that have no value\\n    if { [string length $value] == 0 } {\\n      debug [list process_options_string $option] [format \\\"found empty value, appending option '%s' only\\\" $option] 10\\n      append ret [format \\\"%s \\\" $option]\\n      continue\\n    }\\n\\n    # Handle TMOS set value operations (add,delete,replace,default,none).  Input format for the value is:\\n    #   set_<operation>:item1[,item2]\\n    # Operations other than valid ones will fall through this logic to the default behaviour below\\n    set set_skip 0\\n    set set_raw 0\\n    if { [string match \\\"set_*\\\" $value] } {\\n      set set_cmd_prefix \\\"\\\"\\n      set set_cmd_postfix \\\" \\\\} \\\"\\n      switch -glob [string tolower $value] {\\n        set_add:* {\\n          set set_cmd_prefix \\\"add \\\\{ \\\"\\n        }\\n        set_delete:* {\\n          set set_cmd_prefix \\\"delete \\\\{ \\\"\\n        }\\n        set_replace:* {\\n          set set_cmd_prefix \\\"replace-all-with \\\\{ \\\"\\n        }\\n        set_raw:* {\\n          set set_cmd_prefix \\\"\\\"\\n          set set_cmd_postfix \\\"\\\"\\n          set set_raw 1\\n        }\\n        set_default {\\n          set set_cmd_prefix \\\"default \\\"\\n          set set_cmd_postfix \\\"\\\"\\n          set value \\\"\\\"\\n        }\\n        set_none {\\n          set set_cmd_prefix \\\"none \\\"\\n          set set_cmd_postfix \\\"\\\"\\n          set value \\\"\\\"\\n        }\\n        default {\\n          set set_skip 1\\n        }\\n      }\\n      debug [list process_options_string $option] [format \\\"found set_ value, prefix='%s' postfix='%s' skip=%s\\\" $set_cmd_prefix $set_cmd_postfix $set_skip] 10\\n\\n      if { !$set_skip } {\\n        set set_list [string map {, \\\" \\\"} [lindex [psplit $value ':'] 1]]\\n        debug [list process_options_string $option] [format \\\" set_list=%s\\\" $set_list] 10\\n        append ret [format \\\"%s %s %s %s\\\" $option $set_cmd_prefix $set_list $set_cmd_postfix]\\n        continue\\n      }\\n    }\\n\\n    # Handle the default behaviour\\n    debug [list process_options_string $option] [format \\\"dropped to default\\\"] 10\\n    if { $set_raw } {\\n      append ret [format \\\"%s %s \\\" $option $value]\\n    } else {\\n      append ret [format \\\"%s \\\\\\\"%s\\\\\\\" \\\" $option $value]\\n    }\\n  }\\n  array unset options\\n  debug [list process_options_string return] $ret 10\\n  return $ret\\n}\\n\\n# Split a string and return items matching a prefix in a TCL list\\n# Input: prefix = the prefix to match\\n#        string = the string to split\\n#        splitchar = the charecter to split on (DEFAULT is \\\" \\\")\\n#        strip = 1 value strips the prefix from the returned list\\n#                0 (DEFAULT) does nothing\\n# Return: retlist = a list of matching strings\\nproc get_items_starting_with { prefix string {splitchar \\\" \\\"} {strip 0}} {\\n  set parts [psplit $string $splitchar]\\n  debug [list get_items_starting_with start] \\\"prefix=$prefix string=$string splitchar=$splitchar strip=$strip\\\" 10\\n  set retlist []\\n  foreach part $parts {\\n    if { [string match $prefix* $part] } {\\n      if { $strip == 1 } {\\n        lappend retlist [string map [list $prefix \\\"\\\"] $part]\\n      } else {\\n        lappend retlist $part\\n      }\\n    }\\n  }\\n  debug [list get_items_starting_with retlist] $retlist 10\\n  return [string map [list \\\"\\\\\\\\?\\\" \\\"?\\\"] $retlist]\\n}\\n\\n# Properly escape a tmsh command string\\n# Input: string = the tmsh command\\n# Return: string = the modified string\\nproc create_escaped_tmsh { string } {\\n  return [string map [list \\\\{ \\\\\\\\\\\\{ \\\\} \\\\\\\\\\\\} \\\\\\\" \\\\\\\\\\\\\\\"] $string]\\n}\\n\\n# Set TMOS version info in a global array.  We read info from the /VERSION\\n# file and populate the array with that information.\\nproc set_version_info {} {\\n  global version_info\\n  array set version_info {}\\n  set fh [open \\\"/VERSION\\\" r]\\n  set file_data [read $fh]\\n  close $fh\\n  set data [split $file_data \\\"\\\\n\\\"]\\n  foreach line $data {\\n    set line_info [split $line \\\":\\\"]\\n    set ::version_info([string tolower [lindex $line_info 0]]) [string trim [lindex $line_info 1]]\\n  }\\n  return 1\\n}\\n\\n# Run the cURL command and save the URL to a file.  Throws a hard error if cURL\\n# exits uncleanly\\n# Input: string url = URL to fetch\\n#        string filename = filename to save output to\\n#        int error_exit = 1 => throw hard error on non 200 response code\\n#                         >1 => ignore error and return response code\\nproc curl_save_file { url filename {error_exit 1}} {\\n  debug [list curl_save_file start] \\\"url=$url filename=$filename error_exit=$error_exit\\\" 9\\n  set status [catch {\\n    exec curl --connect-timeout 5 -k -s -w 'RESPCODE=\\\\%\\\\{response_code\\\\}' -o $filename $url\\n  } message]\\n\\n  debug [list curl_save_file done] \\\"status=$status message=$message\\\" 9\\n\\n  if { ![string match \\\"*RESPCODE=200*\\\" $message] } {\\n    if { $error_exit == 1} {\\n      error \\\"Error occured while trying to retrieve $url: $message\\\"\\n    } else {\\n        return 0\\n    }\\n  }\\n\\n  return 1\\n}\\n\\n# Borrowed from tcllib ::ip::IPv4?\\n# Check a string to see if it's an IPv6 address\\n# Input: string addr = string to check\\n# Output: 1 = is IPv6\\n#         0 = not IPv6\\nproc is_ipv6 { addr } {\\n  if { [has_routedomain $addr] } {\\n    set addr [lindex [split $addr %] 0]\\n  }\\n  if {[string first : $addr] >= 0} {\\n      return 1\\n  }\\n  return 0\\n}\\n\\n# Borrowed from http://wiki.tcl.tk/989\\n# Check a string to see if it's an IPv4 address\\n# Input: string addr = string to check\\n# Output: 1 = is IPv4\\n#         0 = not IPv4\\nproc is_ipv4 { addr } {\\n  if { [has_routedomain $addr] } {\\n    set addr [lindex [split $addr %] 0]\\n  }\\n  if {[regexp {^\\\\d+\\\\.\\\\d+\\\\.\\\\d+\\\\.\\\\d+$} $addr]\\n      && [scan $addr %d.%d.%d.%d a b c d] == 4\\n      && 0 <= $a && $a <= 255 && 0 <= $b && $b <= 255\\n      && 0 <= $c && $c <= 255 && 0 <= $d && $d <= 255} {\\n    return 1\\n  } else {\\n    return 0\\n  }\\n}\\n\\n# Check a string to see if it's a IPv4 or IPv6 address\\n# Input: string addr = string to check\\n# Output: >1 = is address (4 = IPv4, 6 = IPv6)\\n#         0 = is NOT an address\\nproc is_ip { addr } {\\n  set v4 [is_ipv4 $addr]\\n  debug [list is_ip $addr v4] $v4 10\\n  if { $v4 } { return 4 }\\n  set v6 [is_ipv6 $addr]\\n  debug [list is_ip $addr v6] $v6 10\\n  if { $v6 } { return 6 }\\n  return 0\\n}\\n\\n# Return a route-domain aware destination address\\n# Input: string = addr to check/modify\\n# Return: string = the correctly formatted destination address\\nproc get_dest_addr { addr } {\\n  if { [is_ipv6 $addr] } {\\n    set addr [string map {[ \\\"\\\" ] \\\"\\\"} $addr]\\n  }\\n\\n  if { ![has_routedomain $addr]} {\\n    return [format \\\"%s%%%s\\\" $addr $::rd]\\n  } else {\\n    return $addr\\n  }\\n}\\n\\n# Return a IPv4/v6 route-domain aware destination string\\n# Input: string addr = The address to use\\n#        strint port = The port number\\n# Return: string = the correctly formatted destination string\\nproc get_dest_str { addr port } {\\n  if { [is_ipv6 $addr] } {\\n    set addr [string map {[ \\\"\\\" ] \\\"\\\"} $addr]\\n    if { ![has_routedomain $addr] } {\\n      return [format \\\"%s%%%s.%s\\\" $addr $::rd $port]\\n    } else {\\n      return [format \\\"%s.%s\\\" $addr $port]\\n    }\\n  }\\n\\n  if { ![has_routedomain $addr]} {\\n    return [format \\\"%s%%%s:%s\\\" $addr $::rd $port]\\n  } else {\\n    return [format \\\"%s:%s\\\" $addr $port]\\n  }\\n}\\n\\n# Convert a APL table row into an array keyed on the column name\\n# Input: list row = The APL TCL list object for the row\\n#        string arrayRef = The name of the existing array to populate\\n#        string defaultsRef = The name of the array to use for default values\\n#        list nullColumns = A list of column names that may contain the keyword\\n#                           'none'.  The value will be replaced with \\\"\\\" on return\\nproc table_row_to_array { row array_ref {defaults_ref {}} {null_columns []} } {\\n  debug [list table_row_to_array row] $row 10\\n  debug [list table_row_to_array array_ref] $array_ref 10\\n  debug [list table_row_to_array defaults_ref] $defaults_ref 10\\n  debug [list table_row_to_array null_columns] $null_columns 10\\n\\n  upvar $array_ref ret\\n  array set defaults [subst [subst $$defaults_ref]]\\n\\n  debug [list table_row_to_array default_vals] [array get defaults] 10\\n\\n  # extract the iApp table data - borrowed from f5.lbaas.tmpl\\n  foreach data [lrange [split [join $row] \\\"\\\\n\\\"] 1 end-1] {\\n      set name [lindex $data 0]\\n      set value [string map {\\\\n \\\\\\\\n \\\\r \\\\\\\\r} [lrange $data 1 end]]\\n      if { [lsearch $null_columns $name] > -1 && [string tolower $value] eq \\\"none\\\" } {\\n        set ret($name) \\\"\\\"\\n        debug [list table_row_to_array set_null] [format \\\"%s=%s\\\" $name $ret($name)] 10\\n      } else {\\n        set ret($name) $value\\n        debug [list table_row_to_array set_value] [format \\\"%s=%s\\\" $name $ret($name)] 10\\n      }\\n  }\\n\\n  # fill in any empty table values - borrowed from f5.lbaas.tmpl\\n  if { [array size defaults] } {\\n    foreach name [array names defaults] {\\n      if { ![info exists ret($name)] || $ret($name) eq \\\"\\\" } {\\n          set ret($name) $defaults($name)\\n          debug [list table_row_to_array set_default] [format \\\"%s=%s\\\" $name $ret($name)] 10\\n      }\\n    }\\n  }\\n  return\\n}\\n\\n# Check to see if a node object exists in the get_config.\\n# Lookups are cached in ::__node_cache for re-use\\n# Input:  string node_name = The object name to check for\\n# Return: 0 = node does not exist\\n#         1 = node does exist\\nproc check_node_exist { node_name } {\\n  if { ! [info exists ::__node_cache($node_name)] } {\\n    set node_status [catch {tmsh::get_config ltm node $node_name} node_status_ret]\\n    debug [list check_node_exist $node_name status] $node_status_ret 10\\n    if { [string match \\\"*address*\\\" $node_status_ret] } {\\n      set ::__node_cache($node_name) 1\\n      debug [list check_node_exist $node_name cache_set] \\\"1\\\" 10\\n      return 1\\n    } else {\\n      set ::__node_cache($node_name) 0\\n      debug [list check_node_exist $node_name cache_set] \\\"0\\\" 10\\n      return 0\\n    }\\n  } else {\\n    debug [list check_node_exist $node_name cache_hit] $::__node_cache($node_name) 10\\n    return $::__node_cache($node_name)\\n  }\\n}\\n\\n# Perform string substitution on a URL.\\n# Input: string url = the URL to manipulate\\n# Output: string url = the final URL\\nproc url_subst { url } {\\n  debug [list url_subst] [format \\\"url=%s\\\" $url] 10\\n  set url_map [list %APP_NAME%           $::app \\\\\\n                    %APP_PATH%           $::app_path \\\\\\n                    %PARTITION%          $::partition \\\\\\n                    %VS_NAME%            $::vs__Name \\\\\\n                    %VS_DESCR%           $::vs__Description \\\\\\n                    %EXT1%               $::extensions__Field1 \\\\\\n                    %EXT2%               $::extensions__Field2 \\\\\\n                    %EXT3%               $::extensions__Field2 \\\\\\n                    \\\"url=\\\"               \\\"\\\" \\\\\\n                    \\\"irule:url=\\\"         \\\"\\\" \\\\\\n                    \\\"irule:urloptional=\\\" \\\"\\\" \\\\\\n                    \\\"asm:url=\\\"           \\\"\\\" \\\\\\n                    \\\"apm:url=\\\"           \\\"\\\" ]\\n\\n  set url [string map $url_map $url]\\n  debug [list url_subst] [format \\\"return=%s\\\" $url] 10\\n  return $url\\n}\\n\\n# Load a crypto cert/key from URL\\n# Input: string type = key|cert\\n#        string url = the URL to get\\n# Return: string obj_name = the name of the created TMOS object\\nproc load_crypto_object { type url } {\\n  set url [url_subst $url]\\n  debug [list load_crypto_object url_subst] $url 10\\n\\n  set url_file_name [lindex [split $url /] end]\\n  set obj_name [format \\\"/%s/%s_%s\\\" $::partition $::app $url_file_name]\\n  set file_name [format \\\"/var/tmp/appsvcs_%s_%s_%s\\\" $::app $::bundler_timestamp $url_file_name]\\n  debug [list load_crypto_object] [format \\\"obj_name=%s file_name=%s\\\" $obj_name $file_name] 10\\n\\n  switch -glob $type {\\n    cert  { set verify_cmd [format \\\"/usr/bin/openssl x509 -noout -in %s\\\" $file_name] }\\n    key { set verify_cmd [format \\\"/usr/bin/openssl rsa -noout -in %s\\\" $file_name] }\\n    default { error \\\"The crypto type specified is not supported\\\" }\\n  }\\n\\n  curl_save_file $url $file_name\\n\\n  set verify_status [catch {eval exec $verify_cmd} verify_status_ret]\\n  debug [list load_crypto_object verify_status $verify_status] $verify_status_ret 10\\n\\n  if { $verify_status } {\\n    file delete $file_name\\n    error \\\"While loading the $type: $verify_status_ret\\\"\\n  }\\n\\n  set cmd [format \\\"sys file ssl-%s %s source-path file://%s\\\" $type $obj_name $file_name]\\n  debug [list load_crypto_object tmsh_create] $cmd 10\\n  set create_status [catch {tmsh::create $cmd} create_status_ret]\\n  debug [list load_crypto_object create_status $create_status] $create_status_ret 10\\n  file delete $file_name\\n\\n  return $obj_name\\n}\\n\\n# Credit: http://www.egghelp.org/cgi-bin/tcl_archive.tcl?mode=download&id=97\\n# Perform a DNS lookup of a hostname using nslookup.  Assumes DNS servers are already\\n# configured in TMOS\\n# Input: string host = name of host to lookup\\n#        int mode = 1 => Throw a hard error\\n#                    0 => Return the error\\n# Return: string return = First IP tied to hostname OR Error\\nproc dns_lookup { host {mode 1} } {\\n  set name \\\"Unknown\\\"\\n  set ip \\\"Unknown\\\"\\n  set errmsg \\\"Unknown\\\"\\n  set host [lindex [string tolower $host] 0]\\n  if {[catch {eval exec \\\"/usr/bin/nslookup\\\" [lindex $host 0]} buff]} {\\n    foreach line [split $buff \\\\n] {\\n      if {[string first \\\"${host}:\\\" $line] != -1} {\\n        set errmsg [string trim [lindex [split $line :] 1]]\\n      }\\n    }\\n\\n    if { $mode } {\\n        error \\\"An error occured trying to resolve $host: $errmsg\\\"\\n    } else {\\n        return \\\"Error: $errmsg\\\"\\n    }\\n  }\\n  set buff [split $buff \\\\n]\\n  set buff [lreplace $buff 0 1]\\n  if {[regexp {name = (.*)\\\\.} $buff -> name]} { set ip $host }\\n\\n  foreach data $buff {\\n    switch [lindex $data 0] {\\n      \\\"Name:\\\" {\\n        set name [string trim [lindex [split $data :] 1]]\\n      }\\n      \\\"Address:\\\" {\\n        set ip [string trim [lindex [split $data :] 1]]\\n      }\\n      \\\"Addresses:\\\" {\\n        set ip [string trim [lindex [split $data :] 1]]\\n      }\\n    }\\n  }\\n  return \\\"${ip}\\\"\\n}\\n\\nset_version_info\\n\\n# Copyright (c) 2017 F5 Networks, Inc.\\n#\\n# Licensed under the Apache License, Version 2.0 (the \\\"License\\\");\\n# you may not use this file except in compliance with the License.\\n# You may obtain a copy of the License at\\n#\\n#     http://www.apache.org/licenses/LICENSE-2.0\\n#\\n#     Unless required by applicable law or agreed to in writing, software\\n#     distributed under the License is distributed on an \\\"AS IS\\\" BASIS,\\n#     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\\n#     See the License for the specific language governing permissions and\\n#     limitations under the License.\\n#\\n# ####################################################################\\n# Custom extensions example\\n#\\n# The purpose of custom extensions is to allow functionality to be implemented\\n# without modifying the base deployment code.  Additionally control over these\\n# extensions can be exposed via the extensions__fieldX fields to allow functionality\\n# to be added WITHOUT changes to the presentation layer. By exposing the extension\\n# fields as tenant editable we can add code to this portion of the iApp to handle\\n# new functionality without changing the northbound data model\\n#\\n# The following procs are called at various points during the implementation:\\n#   custom_extensions_start: Called at the start of the deployment after mode is determined\\n#   custom_extensions_before_pools:  Called before processing all pool(s) starts\\n#   custom_extensions_before_pool:  Called before processing to create the pool starts\\n#   custom_extensions_after_pool: Called immediately after the pool is created\\n#   custom_extensions_after_pools: Called immediately after all pool(s) are created\\n#   custom_extensions_before_vs:  Called before processing to create the virtual server starts\\n#   custom_extensions_after_vs: Called immediately after the virtual server is created\\n#   custom_extentions_end: Called at the end of the deployment\\n#\\n# Guidelines:\\n#  - Avoid name collisions please prefix variables with 'custom_' unless used by the base deployment code\\n#  - Restrict modifications to global presentation layer variables unless absolutely required\\n#  - Try to modify the config once created by the base deployment code to maintain compatibility\\n#\\n# Two examples are implemented here:\\n#  - custom_example_1: Called from all hooks to dump some info to the debug log\\n#  - custom_example_2: (Disabled by default) Called at the end of the deployment to execute\\n#                      a tmsh::create command\\n\\nproc custom_extensions_start {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Example 1: Parse a string of the format \\\"key1=val1;key2=val2;key3=val3\\\" and populate an array.\\n  # The we call the custom_example proc to dump some info to the /var/tmp/scriptd.out log\\n\\n  # Make the global variable accessable locally.  Additionally create a global array to store KVP pairs\\n  upvar extensions__Field1 field1\\n  upvar custom_field1_kvp kvp_array\\n\\n  # Check to see we got some data in extensions__Field1\\n  if { [string length $field1] > 0 } {\\n    # Use the process_kvp_string proc to populate an array\\n    array set kvp_array [process_kvp_string $field1]\\n\\n    debug \\\"[lindex [info level 0] 0]\\\" \\\"kvp_array=[array get kvp_array]\\\" 0\\n    # Call our custom_example_1 proc to dump some info to the debug log.\\n    custom_example_1 [array get kvp_array]\\n  }\\n}\\n\\nproc custom_extensions_before_pools {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_before_pool {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_after_pool {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_after_pools {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_before_vs {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_after_vs {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_end {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n\\n  # Call our custom_example_2 proc to run a user provided tmsh create command\\n  #\\n  # Populate extensions__Field2 with a valid command like:\\n  #  ltm data-group internal customDG type string records replace-all-with { record1 { data data1 } record2 { data data2 } }\\n  #\\n  # Once the template executes you can see the creation of the datagroup under the application template container\\n\\n  # ** To enable example 2 uncomment the following two lines **\\n  # upvar extensions__Field2 field2\\n  # custom_example_2 $field2\\n}\\n\\n# Example 1: Simply dump a log line to /var/tmp/scriptd.out\\nproc custom_example_1 { kvp_array_in } {\\n  set calling_proc [lindex [info level -1] 0]\\n  set current_proc [lindex [info level 0] 0]\\n  array set kvp_array $kvp_array_in\\n\\n  debug [list $current_proc] \\\"entering proc kvp_array_in=$kvp_array_in\\\" 6\\n\\n  if { [info exists kvp_array(custom_example)] && $kvp_array(custom_example) == 1} {\\n   debug [list $current_proc] \\\"This is an example of a custom extension called from $calling_proc\\\" 6\\n  }\\n}\\n\\n# Example 2: Run the text in extensions__Field2 as a tmsh create command\\nproc custom_example_2 { cmd } {\\n  set calling_proc [lindex [info level -1] 0]\\n  set current_proc [lindex [info level 0] 0]\\n\\n  debug [list $current_proc] \\\"entering proc cmd=$cmd\\\" 6\\n\\n  if { [string length $cmd] > 0 } {\\n    debug [list $current_proc] \\\"Called from $calling_proc - About the execute tmsh::create $cmd\\\" 6\\n    tmsh::create $cmd\\n  }\\n}\\n\\narray set bundler_objects {}\\narray set bundler_data {}\\nset bundler_deferred_cmds []\\n\\n\\n\\nset app $tmsh::app_name\\ndebug [list start] [format \\\"Starting %s version IMPL=%s TMPLNAME=%s app_name=%s\\\" $NAME $IMPLVERSION $TMPLNAME $app] 0\\ndebug [list version_info] [array get version_info] 3\\n\\narray set modenames {\\n  1 {Standalone}\\n  2 {iWorkflow}\\n  3 {Cisco APIC}\\n  4 {VMware NSX}\\n}\\n\\narray set __provision_cache {}\\narray set __node_cache {}\\nload_provisioned\\n\\narray set aso_config {}\\nset asoobj {}\\nset modeinfo [get_mode]\\nset mode [lindex $modeinfo 0]\\nset folder [lindex $modeinfo 1]\\nset partition [lindex $modeinfo 2]\\nset rd [lindex $modeinfo 3]\\nset newdeploy [lindex $modeinfo 4]\\nset app_path [format \\\"/%s/%s.app\\\" $partition $app]\\nset template_name [format \\\"appsvcs_integration_v%s\\\" $IMPLMAJORVERSION]\\nset aso [format \\\"%s/%s\\\" $app_path $app]\\nset redeploy 0\\nif { ! $newdeploy } { set redeploy 1 }\\nset postfinal_deferred_cmds []\\n\\ndebug \\\"modeinfo\\\" [format \\\"mode=%s folder=%s partition=%s rd=%s newdeploy=%s redeploy=%s template_name=%s\\\" $mode $folder $partition $rd $newdeploy $redeploy $template_name] 2\\n\\n# Cache our ASO object data\\nfor { set i 0 } { $i <= [llength $asoobj] } { set i [expr {$i+2}] } {\\n  set type [lindex $asoobj $i]\\n  if { $type == \\\"variables\\\" || $type == \\\"lists\\\" || $type == \\\"tables\\\" } {\\n    for { set j 0 } { $j < [llength [lindex $asoobj [expr {$i+1}]]] } { set j [expr {$j+2}] } {\\n      set name [lindex [lindex $asoobj [expr {$i+1}]] $j]\\n\\n      if { $type == \\\"tables\\\" } {\\n        set val [lindex [lindex $asoobj [expr {$i+1}]] [expr {$j+1}]]\\n      } elseif { $type == \\\"lists\\\" } {\\n        set val [lindex [lindex [lindex $asoobj [expr {$i+1}]] [expr {$j+1}]] 1]\\n      } else {\\n        set val [lindex [lindex [lindex $asoobj [expr {$i+1}]] [expr {$j+1}]] 1]\\n      }\\n      set aso_config($name) $val\\n    }\\n  }\\n}\\n# Copy the array so that we can preserve the original values\\n# aso_config() can change at runtime\\narray set aso_config_orig [array get aso_config]\\n\\ndebug [list aso_config] [array names aso_config] 9\\nforeach var [array names aso_config] {\\n  debug [list aso_config $var] $aso_config($var) 9\\n}\\n\\nset asodescr [format \\\"Deployed by appsvcs_integration_v%s in %s mode on %s\\\" $IMPLVERSION $modenames($mode) [clock format $startTime -format \\\"%D %H:%M:%S\\\"]]\\ndebug [list set_aso_decription tmsh_modify] [format \\\"sys application service %s description \\\\\\\"%s\\\\\\\"\\\" $aso $asodescr] 1\\ntmsh::modify [format \\\"sys application service %s description \\\\\\\"%s\\\\\\\"\\\" $aso $asodescr]\\n\\n# Define various global values\\nset allVars {\\n iapp__strictUpdates \\\\\\n iapp__appStats \\\\\\n iapp__mode \\\\\\n iapp__logLevel \\\\\\n iapp__routeDomain \\\\\\n iapp__asmDeployMode \\\\\\n iapp__apmDeployMode \\\\\\n pool__addr \\\\\\n pool__mask \\\\\\n pool__port \\\\\\n pool__DefaultPoolIndex \\\\\\n pool__Pools \\\\\\n pool__MemberDefaultPort \\\\\\n pool__Members \\\\\\n monitor__Monitors \\\\\\n vs__Listeners \\\\\\n vs__Name \\\\\\n vs__Description \\\\\\n vs__RouteAdv \\\\\\n vs__SourceAddress \\\\\\n vs__IpProtocol \\\\\\n vs__ConnectionLimit \\\\\\n vs__ProfileClientProtocol \\\\\\n vs__ProfileServerProtocol \\\\\\n vs__ProfileHTTP \\\\\\n vs__ProfileOneConnect \\\\\\n vs__ProfileCompression \\\\\\n vs__ProfileAnalytics \\\\\\n vs__ProfileRequestLogging \\\\\\n vs__ProfileDefaultPersist \\\\\\n vs__ProfileFallbackPersist \\\\\\n vs__SNATConfig \\\\\\n vs__ProfileServerSSL \\\\\\n vs__ProfileClientSSL \\\\\\n vs__ProfileClientSSLCert \\\\\\n vs__ProfileClientSSLKey \\\\\\n vs__ProfileClientSSLChain \\\\\\n vs__ProfileClientSSLCipherString \\\\\\n vs__ProfileClientSSLAdvOptions \\\\\\n vs__ProfileSecurityLogProfiles \\\\\\n vs__ProfileSecurityIPBlacklist \\\\\\n vs__ProfileSecurityDoS \\\\\\n vs__ProfileAccess \\\\\\n vs__ProfileConnectivity \\\\\\n vs__ProfilePerRequest \\\\\\n vs__OptionSourcePort \\\\\\n vs__OptionConnectionMirroring \\\\\\n vs__Irules \\\\\\n vs__BundledItems \\\\\\n vs__AdvOptions \\\\\\n vs__AdvProfiles \\\\\\n vs__AdvPolicies \\\\\\n vs__VirtualAddrAdvOptions \\\\\\n l7policy__strategy \\\\\\n l7policy__defaultASM \\\\\\n l7policy__defaultL7DOS \\\\\\n l7policy__rulesMatch \\\\\\n l7policy__rulesAction \\\\\\n feature__statsTLS \\\\\\n feature__statsHTTP \\\\\\n feature__insertXForwardedFor \\\\\\n feature__redirectToHTTPS \\\\\\n feature__sslEasyCipher \\\\\\n feature__securityEnableHSTS \\\\\\n feature__easyL4Firewall \\\\\\n feature__easyL4FirewallBlacklist \\\\\\n feature__easyL4FirewallSourceList \\\\\\n extensions__Field1 \\\\\\n extensions__Field2 \\\\\\n extensions__Field3 \\\\\\n app_stats }\\n\\nset requiredVars {\\n pool__addr \\\\\\n pool__mask \\\\\\n pool__port \\\\\\n vs__ProfileClientProtocol }\\n\\narray set table_defaults {\\n    Members {\\n        Index 0\\n        State enabled\\n        IPAddress \\\"\\\"\\n        Port \\\"\\\"\\n        ConnectionLimit 0\\n        Ratio 1\\n        PriorityGroup 0\\n        AdvOptions \\\"\\\"\\n    }\\n    Pools {\\n      Index -1\\n      Name \\\"\\\"\\n      Description \\\"\\\"\\n      LbMethod \\\"\\\"\\n      Monitor \\\"\\\"\\n      AdvOptions \\\"\\\"\\n    }\\n    Monitors {\\n      Index -1\\n      Name \\\"\\\"\\n      Type \\\"\\\"\\n      Options \\\"\\\"\\n    }\\n    L7P_Match {\\n      Group -1\\n      Operand \\\"\\\"\\n      Negate no\\n      Condition \\\"\\\"\\n      CaseSensitive no\\n      Value \\\"\\\"\\n      Missing no\\n    }\\n    L7P_Action {\\n      Group -1\\n      Target error/error/error\\n      Parameter error\\n    }\\n    Listeners {\\n      Listener \\\"\\\"\\n      Destination \\\"\\\"\\n    }\\n}\\n\\narray set pool_member_state {\\n    enabled        {session user-enabled state user-up}\\n    disabled       {session user-disabled state user-up}\\n    force-disabled {session user-disabled state user-down}\\n    drain-disabled {session user-disabled state user-up}\\n}\\n\\n# Fixup incoming variables: If no value is sent for a particular iApp field than the var is not created which\\n# results in all sorts of problems.  We just check for existence of the var and set to \\\"\\\" if it doesn't exist\\nforeach var $allVars {\\n  if {[info exists [subst $var]]} {\\n    debug \\\"input\\\" [format \\\"%s sent, value is: %s\\\" $var [set [subst $var]]] 2\\n  } else {\\n    set [subst $var] \\\"\\\"\\n    debug \\\"input\\\" [format \\\"%s NOT sent, setting to blank\\\" $var] 2\\n  }\\n}\\n\\n# Double check we got all the required variables.\\nforeach var $requiredVars {\\n  debug [list required_check] [format \\\"var=%s val=%s len=%s\\\" $var [set [subst $var]] [string length [set [subst $var]]]] 10\\n  if {! [info exists [subst $var]] || [string length [set [subst $var]]] == 0 } {\\n    if { ! [string match \\\"vs__\\\" $var] && $pool__addr != \\\"255.255.255.254\\\" } {\\n      error \\\"The variable $var is required\\\"\\n    }\\n  }\\n}\\n\\n# Convert the $vs__BundledItems table to a list for easier manipulation\\nset vs__BundledItems [single_column_table_to_list $vs__BundledItems \\\"Resource\\\"]\\ndebug [list convert_bundled] $vs__BundledItems 7\\n\\n# Call the custom_extensions_start proc to allow site-specific customizations\\ncustom_extensions_start\\n\\n# Special handling for the Source Address because it comes in as 0.0.0.0/0 and\\n# needs to be 0.0.0.0%xxxx/0, where '%xxxx' is the route-domain ID\\nset working $vs__SourceAddress\\ndebug [list fix_src_addr] \\\"Check if vs__SourceAddress needs to be fixed\\\" 7\\nif { [string length $working] > 0 } {\\n  set net  [lindex [split $working /] 0]\\n  set cidr [lindex [split $working /] 1]\\n  set vs__SourceAddress \\\"$net%$rd\\\\/$cidr\\\"\\n  debug [list fix_src_addr] [format \\\" Fixing vs__SourceAddress: orig=%s new=%s\\\" $working $vs__SourceAddress] 7\\n}\\n\\n# Create Client-SSL profile if Cert and Key are specified but ClientSSLProfile is not\\ndebug [list client_ssl create] \\\"checking if client ssl cert & key were entered\\\" 7\\nset clientssl 0\\nif { [string length $vs__ProfileClientSSLKey] > 0 && [string length $vs__ProfileClientSSLCert] > 0 && [string length $vs__ProfileClientSSL] == 0 } {\\n\\n  set crypto_url_found 0\\n  if { [string match \\\"url=*\\\" $vs__ProfileClientSSLKey] } {\\n    set vs__ProfileClientSSLKey [load_crypto_object \\\"key\\\" $vs__ProfileClientSSLKey]\\n    set crypto_url_found 1\\n  }\\n\\n  if { [string match \\\"url=*\\\" $vs__ProfileClientSSLCert] } {\\n    set vs__ProfileClientSSLCert [load_crypto_object \\\"cert\\\" $vs__ProfileClientSSLCert]\\n    set crypto_url_found 1\\n  }\\n\\n  if { [string match \\\"url=*\\\" $vs__ProfileClientSSLChain] } {\\n    set vs__ProfileClientSSLChain [load_crypto_object \\\"cert\\\" $vs__ProfileClientSSLChain]\\n    set crypto_url_found 1\\n  }\\n\\n  if { $vs__ProfileClientSSLKey == \\\"auto\\\" } {\\n    debug [list client_ssl create auto_key] [format \\\"found auto option for key, setting vs__ProfileClientSSLKey=/Common/%s.key\\\" $app] 5\\n    set vs__ProfileClientSSLKey \\\"/Common/$app.key\\\"\\n  }\\n\\n  if { $vs__ProfileClientSSLCert == \\\"auto\\\" } {\\n    debug [list client_ssl create auto_cert] [format \\\"found auto option for key, setting vs__ProfileClientSSLCert=/Common/%s.crt\\\" $app] 5\\n    set vs__ProfileClientSSLCert \\\"/Common/$app.crt\\\"\\n  }\\n\\n  if { $crypto_url_found == 0 } {\\n    tmsh::get_config /sys file ssl-key $vs__ProfileClientSSLKey\\n    tmsh::get_config /sys file ssl-cert $vs__ProfileClientSSLCert\\n    debug [list client_ssl create check_exist] \\\"ssl cert & key found... creating profile\\\" 7\\n  }\\n\\n  set cmd [format \\\"ltm profile client-ssl %s_clientssl key %s cert %s\\\" $app $vs__ProfileClientSSLKey $vs__ProfileClientSSLCert]\\n\\n  if { [string length $vs__ProfileClientSSLChain] > 0 } {\\n      if { $crypto_url_found == 0 } {\\n        tmsh::get_config /sys file ssl-cert $vs__ProfileClientSSLChain\\n      }\\n      debug [list client_ssl create cert_chain] \\\"adding cert chain\\\" 7\\n      append cmd [format \\\" chain %s\\\" $vs__ProfileClientSSLChain]\\n  }\\n\\n\\tarray set feature_sslEasyCipher_strings {\\n\\t\\tcompatible {NATIVE:!SSLv3:!SSLv2:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t\\tmedium {TLSv1_2+HIGH:TLSv1_1+HIGH:TLSv1+MEDIUM:TLSv1+HIGH:!EXPORT:!RC4:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t\\thigh {TLSv1_2+HIGH:TLSv1_1+HIGH:TLSv1+MEDIUM:TLSv1+HIGH:!RC4:!RSA:!DHE:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t\\ttls_1.2 {TLSv1_2:!TLSv1_2+LOW:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t\\ttls_1.1+1.2 {TLSv1_2:TLSv1_1:!TLSv1_2+LOW:!TLSv1_1+LOW:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t}\\n\\n\\tif { $feature__sslEasyCipher ne \\\"disabled\\\" && [info exists feature_sslEasyCipher_strings($feature__sslEasyCipher)]} {\\n\\t\\tdebug [list client_ssl create ssl_easy_cipher] [format \\\"sslEasyCipher is not disabled, setting vs__ProfileClientSSLCipherString=%s\\\" $feature_sslEasyCipher_strings($feature__sslEasyCipher)] 5\\n\\t\\tset vs__ProfileClientSSLCipherString $feature_sslEasyCipher_strings($feature__sslEasyCipher)\\n\\t}\\n\\n  if { [string length $vs__ProfileClientSSLCipherString] > 0 } {\\n      debug [list client_ssl create cipher_string] \\\"adding cipher string\\\" 7\\n      append cmd [format \\\" ciphers \\\\\\\"%s\\\\\\\"\\\" $vs__ProfileClientSSLCipherString]\\n  }\\n\\n  if { [string length $vs__ProfileClientSSLAdvOptions] > 0 } {\\n    debug [list client_ssl create adv_options] \\\"processing advanced options string\\\" 7\\n    append cmd [format \\\" %s\\\" [process_options_string $vs__ProfileClientSSLAdvOptions \\\"profile client-ssl\\\" \\\"/Common/clientssl\\\"]]\\n  }\\n\\n  debug [list client_ssl create tmsh_create] $cmd 1\\n  tmsh::create $cmd\\n  set clientssl 1\\n} else {\\n  if { [string length $vs__ProfileClientSSL] > 0 } {\\n    if { ![string match \\\"create:*\\\" $vs__ProfileClientSSL] } {\\n      debug [list client_ssl associate] \\\"ClientSSLProfile was provided... checking if it exists\\\" 5\\n      tmsh::get_config /ltm profile client-ssl $vs__ProfileClientSSL\\n      set clientssl 2\\n    } else {\\n      debug [list client_ssl create] \\\"create ClientSSLProfile was provided...\\\" 5\\n      set clientssl 3\\n    }\\n  } else {\\n    set clientssl 0\\n    if { [string length $vs__ProfileClientSSLKey] > 0 && [string length $vs__ProfileClientSSLCert] == 0 } {\\n      error \\\"A client-ssl key was specified without a client-ssl certifcate\\\"\\n    }\\n    if { [string length $vs__ProfileClientSSLKey] == 0 && [string length $vs__ProfileClientSSLCert] > 0 } {\\n      error \\\"A client-ssl certifcate was specified without a client-ssl key\\\"\\n    }\\n    debug [list client_ssl] \\\"ssl cert & key not specified... skipped Client-SSL profile creation\\\" 2\\n  }\\n}\\n\\n# Fixup empty pool__Pools and monitor__Monitors table if pool__Members is populated\\n# The behaviour implemented here will create a pool with a round-robin lb-method\\n#\\n# If a monitor with Index 0 is present in the monitor__Monitors table\\n# the pool monitor will be set to that.\\n#\\n# If the monitor__Monitors is empty a default monitor will be created\\nset monCount [llength $monitor__Monitors]\\nset poolCount [llength $pool__Pools]\\nset poolMemberCount [llength $pool__Members]\\n\\nset poolTmpl {{{\\n    AdvOptions none\\n    Description\\n    Index %INDEX%\\n    LbMethod round-robin\\n    Monitor %MONITOR%\\n    Name\\n}} }\\n\\nset monitorTmpl {{{\\n  Index 0\\n  Name %NAME%\\n  Type\\n  Options\\n}} }\\n\\nif { $poolCount == 0 && $poolMemberCount > 0 } {\\n  debug [list pools_fixup] [format \\\"poolCount=%s\\\" $poolCount] 7\\n  debug [list pools_fixup] [format \\\"monCount=%s\\\" $monCount] 7\\n  debug [list pools_fixup] [format \\\"poolMemberCount=%s\\\" $poolMemberCount] 7\\n  set poolFixupIndexes []\\n  array set poolFixupFound {}\\n  foreach memberRow $pool__Members {\\n    array unset memberColumn\\n    array set memberColumn {}\\n    table_row_to_array $memberRow memberColumn ::table_defaults(Members) [list AdvOptions]\\n    if { ![info exists poolFixupFound($memberColumn(Index))] } {\\n      debug [list pools_fixup found_pool] [format \\\"index=%s\\\" $memberColumn(Index)] 7\\n      lappend poolFixupIndexes $memberColumn(Index)\\n      set poolFixupFound($memberColumn(Index)) 1\\n    }\\n  }\\n  debug [list pools_fixup create_indexes] $poolFixupIndexes 7\\n\\n  set poolFixupMonitor \\\"0\\\"\\n  if { $monCount == 0 } {\\n    if { $vs__IpProtocol == \\\"tcp\\\" } {\\n      if { [string length $vs__ProfileHTTP] > 0 } {\\n        set monFixupName \\\"/Common/http\\\"\\n      } else {\\n        set monFixupName \\\"/Common/tcp\\\"\\n      }\\n      set monTmpl_map [list %NAME% $monFixupName]\\n      set monitor__Monitors [string map $monTmpl_map $monitorTmpl]\\n      debug [list pools_fixup monitor__Monitors] $monitor__Monitors 7\\n    } else {\\n      set poolFixupMonitor \\\"\\\"\\n    }\\n  }\\n\\n  set poolTemp \\\"\\\"\\n  foreach foundIndex $poolFixupIndexes {\\n    set poolTmpl_map [list %INDEX% $foundIndex \\\\\\n                           %MONITOR% $poolFixupMonitor ]\\n    append poolTemp [string map $poolTmpl_map $poolTmpl]\\n  }\\n  set pool__Pools $poolTemp\\n  debug [list pools_fixup pool__Pools] $pool__Pools 7\\n\\n  set monCount [llength $monitor__Monitors]\\n  set poolCount [llength $pool__Pools]\\n}\\n\\n# Create Monitors\\ndebug [list monitors] [format \\\"monCount=%s\\\" $monCount] 7\\nset monIdx 0\\narray set monNames {}\\narray set monCreate {}\\nforeach monRow $monitor__Monitors {\\n  set cmd \\\"\\\"\\n  debug [list monitors $monIdx] [format \\\"monRow=%s\\\" $monRow] 9\\n\\n  array unset monColumn\\n  array set monColumn {}\\n  table_row_to_array $monRow monColumn ::table_defaults(Monitors)\\n  debug [list monitors table_row_to_array return] [array get monColumn] 7\\n\\n  # Fixup the Index in case a table with exactly one row and no Index is sent\\n  if { [llength $monitor__Monitors] == 1 && $monColumn(Index) == -1 } {\\n    debug [list monitors fixup_index] \\\"setting Index to 0\\\" 9\\n    set monColumn(Index) 0\\n  }\\n\\n  # The BIG-IP UI sends empty rows... above this we set Index to -1 if it wasn't found\\n  # If a Index is not specified then skip this row in the table\\n  if { $monColumn(Index) < 0 } {\\n    debug [list monitors $monIdx check_index] \\\"no index value found, skipping row\\\" 9\\n    continue\\n  } elseif { [info exists monNames($monColumn(Index))] } {\\n    error \\\"A monitor with Index of \\\\\\\"$monColumn(Index)\\\\\\\" was already specified\\\"\\n  } else {\\n    if {[string length $monColumn(Name)] > 0 } {\\n      if { [string match \\\"/*\\\" $monColumn(Name)] } {\\n        set monNames($monColumn(Index)) $monColumn(Name)\\n        set monCreate($monColumn(Index)) 0\\n      } else {\\n        set monNames($monColumn(Index)) [format \\\"%s/%s\\\" $app_path $monColumn(Name)]\\n        set monCreate($monColumn(Index)) 1\\n      }\\n    } else {\\n      set monNames($monColumn(Index)) [format \\\"%s/monitor_%s\\\" $app_path $monColumn(Index)]\\n      set monCreate($monColumn(Index)) 1\\n    }\\n  }\\n\\n  if { $monCreate($monColumn(Index)) == 1 } {\\n    if { [string length $monColumn(Type)] <= 0 } {\\n      error \\\"A Monitor Type was not specified for monitor with Index $monColumn(Index)\\\"\\n    }\\n\\n    set cmd [format \\\"ltm monitor %s %s \\\" $monColumn(Type) $monNames($monIdx)]\\n    if { [string length $monColumn(Options)] > 0 } {\\n      set monColumn(Options) [join $monColumn(Options) \\\" \\\"]\\n      debug [list monitors $monIdx options] [format \\\"processing options string \\\\\\\"%s\\\\\\\"\\\" $monColumn(Options)] 10\\n      append cmd [format \\\" %s\\\" [process_options_string $monColumn(Options) \\\"\\\" \\\"\\\"]]\\n    }\\n\\n    debug [list monitors $monIdx tmsh_create] $cmd 1\\n    tmsh::create $cmd\\n  }\\n\\n  incr monIdx\\n}\\n\\n# Call the custom_extensions_before_pool proc to allow site-specific customizations\\ncustom_extensions_before_pools\\n\\n# Create pool\\ndebug [list pools] [format \\\"poolCount=%s\\\" $poolCount] 7\\n\\nset poolIdx 0\\nset default_pool_name \\\"\\\"\\narray set poolIndexes {}\\narray set poolNames {}\\nforeach poolRow $pool__Pools {\\n  set cmd \\\"\\\"\\n  set numMembers 0\\n\\n  debug [list pools $poolIdx] [format \\\"poolRow=%s\\\" $poolRow] 9\\n\\n  custom_extensions_before_pool\\n\\n  array unset poolColumn\\n  array set poolColumn {}\\n  table_row_to_array $poolRow poolColumn ::table_defaults(Pools) [list AdvOptions]\\n  debug [list pools $poolIdx table_row_to_array return] [array get poolColumn] 7\\n\\n  # Fixup the Index in case a table with exactly one row and no Index is sent\\n  if { [llength $pool__Pools] == 1 && $poolColumn(Index) == -1 } {\\n    debug [list pools $poolIdx fixup_index] \\\"setting Index to 0\\\" 9\\n    set poolColumn(Index) 0\\n  }\\n\\n  # The BIG-IP UI sends empty rows... above this we set Index to -1 if it wasn't found\\n  # If a Index is not specified then skip this row in the table\\n  if { $poolColumn(Index) < 0 } {\\n    debug [list pools $poolIdx] \\\"no index value found, skipping row\\\" 9\\n    continue\\n  } elseif { [info exists poolIndexes($poolColumn(Index))] } {\\n    error \\\"A pool with Index of \\\\\\\"$poolColumn(Index)\\\\\\\" was already specified\\\"\\n  } else {\\n    set poolIndexes($poolColumn(Index)) 1\\n  }\\n\\n  # Check to see if a poolName was specified... if not set to $app_pool_$poolColumn(Index)\\n  if { [string length $poolColumn(Name)] == 0 } {\\n      set poolColumn(Name) [format \\\"%s_pool_%s\\\" $app $poolColumn(Index)]\\n      debug [list pools $poolIdx] [format \\\"no pool name specified... setting to %s\\\" $poolColumn(Name)] 7\\n  }\\n  set poolNames($poolColumn(Index)) $poolColumn(Name)\\n\\n  if { $poolColumn(Index) == $pool__DefaultPoolIndex } {\\n    # Set the default pool name for use later during virtual server creation\\n    set default_pool_name $poolColumn(Name)\\n  }\\n\\n  # Process the pool__Members table\\n  set memberStr \\\"members replace-all-with \\\\{ \\\"\\n  foreach memberRow $pool__Members {\\n    array unset memberColumn\\n    array set memberColumn {}\\n    table_row_to_array $memberRow memberColumn ::table_defaults(Members) [list AdvOptions]\\n\\n    set memberId [format \\\"%s/%s:%s\\\" $memberColumn(Index) $memberColumn(IPAddress) $memberColumn(Port)]\\n\\n    if { [llength $pool__Pools] == 1 &&  $memberColumn(Index) == -1 } {\\n      set memberColumn(Index) 0\\n    }\\n\\n    if { $memberColumn(Index) != $poolColumn(Index) } {\\n      debug [list pools $poolIdx members $memberId skip_index] [format \\\"not a member of pool %s skipping\\\" $poolColumn(Index)] 11\\n      continue\\n    }\\n\\n    debug [list pools $poolIdx members $memberId config_raw] [array get memberColumn] 9\\n\\n\\n    set memberColumn(AdvOptions) [lindex $memberColumn(AdvOptions) 0]\\n\\n    # We support for many option formats for the IPAddress field.  Examples are:\\n    #  0.0.0.0                   Special value that signals to skip this pool member\\n    #  x.x.x.x[%y][;nodename]    IPv4 Address w/w/o Route Domain or Node Name\\n    #  abcd::0001[%y][;nodename] IPv6 Address w/w/o Route Domain or Node Name\\n    #  /Common/node_name         Pre-existing node name\\n    #  node_name                 Pre-existing node name without folder (default folder=Common)\\n    #  hostname.org.com          A DNS Hostname (resolved on deployment)\\n    #\\n    # These options are processed as follows:\\n    #  1) Skip row if IPAddress == \\\"0.0.0.0*\\\" or is empty\\n    #  2) Determine if a node object was specified or not\\n    #  3) If node object does not exist process as follows\\n    #    3a) If a nodename option was specified create the node object\\n    #    3b) If not IP than assume a hostname and resolve IP, create node using hostname, add node to member string\\n\\n    # 1) Skip pool members with a 0.0.0.0 or empty IP.  Added to allow creation of an empty pool when you still have\\n    # to expose the pool member IP as a tenant editable field in iWorkflow (Cisco APIC needs this for Dynamic Endpoint Insertion)\\n    if { [string match 0.0.0.0* $memberColumn(IPAddress)] || [string length $memberColumn(IPAddress)] == 0 } {\\n      debug [list pools $poolIdx members $memberId skip_ip] \\\"ip=0.0.0.0 or empty, skipping\\\" 7\\n      continue\\n    } else {\\n      incr numMembers\\n    }\\n\\n    # TODO: Is this still required?\\n    # Sometimes we receive a transposed ip/port from iWorkflow... fix it here\\n    if {[has_routedomain $memberColumn(Port)]} {\\n      set new_port $memberColumn(IPAddress)\\n      set new_ip $memberColumn(Port)\\n      set memberColumn(Port) $new_port\\n      set memberColumn(IPAddress) $new_ip\\n      debug [list pools $poolIdx members $memberId fix_ip_port] [format \\\"ip=%s port=%s\\\" $memberColumn(IPAddress) $memberColumn(Port)] 7\\n    }\\n\\n    set node_default_folder \\\"/Common/\\\"\\n    if { [string first \\\"/\\\" $memberColumn(IPAddress)] >= 0 } { set node_default_folder \\\"\\\" }\\n    set node_create 0\\n    if { [string first \\\\; $memberColumn(IPAddress)] > 1 } {\\n      set memberColumn(IPAddress) [lindex $memberColumn(IPAddress) 0]\\n      set node_info [psplit $memberColumn(IPAddress) \\\\;]\\n      set memberColumn(IPAddress) [lindex $node_info 0]\\n      set memberColumn(NodeName) [lindex $node_info 1]\\n      set node_obj_name [format \\\"%s%s\\\" $node_default_folder $memberColumn(NodeName)]\\n      debug [list pools $poolIdx members $memberId named_node node_obj_name] $node_obj_name 7\\n    } else {\\n      set node_obj_name [format \\\"%s%s\\\" $node_default_folder $memberColumn(IPAddress)]\\n      debug [list pools $poolIdx members $memberId node_obj_name] $node_obj_name 7\\n    }\\n\\n    # 2) Determine if a node object was specified rather than an IP address\\n    set node_exist [check_node_exist $node_obj_name]\\n    debug [list pools $poolIdx members $memberId set_blank_folder] \\\"folder=$node_default_folder name=$node_obj_name exist=$node_exist\\\" 7\\n\\n    debug [list pools $poolIdx members $memberId is_ip] \\\"$memberColumn(IPAddress) [is_ip $memberColumn(IPAddress)]\\\" 7\\n\\n    if { [info exists memberColumn(NodeName)] && $node_exist == 0 } {\\n      set node_create 1\\n    } else {\\n      if { $node_exist == 0 && [is_ip $memberColumn(IPAddress)] == 0 } {\\n        set memberColumn(NodeName) $memberColumn(IPAddress)\\n        set memberColumn(IPAddress) [dns_lookup $memberColumn(IPAddress)]\\n        debug [list pools $poolIdx members $memberId resolved_ip] $memberColumn(IPAddress) 7\\n        set node_create 1\\n      }\\n    }\\n\\n    if { $node_create } {\\n      set node_cmd [format \\\"ltm node /%s/%s address %s\\\" $partition $memberColumn(NodeName) $memberColumn(IPAddress)]\\n      debug [list pools $poolIdx members $memberId named_node tmsh_create] $node_cmd 7\\n      tmsh::create $node_cmd\\n      set __node_cache($memberColumn(NodeName)) 1\\n      set node_exist 1\\n      set memberColumn(IPAddress) [format \\\"/Common/%s\\\" $memberColumn(NodeName)]\\n    }\\n\\n    # Add a route domain if it wasn't included and we don't already have a node object created\\n    if { $node_exist == 0 && ![has_routedomain $memberColumn(IPAddress)]} {\\n      set memberColumn(IPAddress) [get_dest_addr $memberColumn(IPAddress)]\\n    }\\n\\n    # If we don't get a port in the pool member table than use the template value for pool__MemberDefaultPort\\n    # If pool__MemberDefaultPort is empty than use the value for pool__port\\n    if { [string length $memberColumn(Port)] == 0} {\\n      if { [string length $pool__MemberDefaultPort] == 0 } {\\n        debug [list pools $poolIdx members $memberId port_sub_vs] [format \\\"using %s\\\" $pool__port] 5\\n        set memberColumn(Port) $pool__port\\n      } else {\\n        debug [list pools $poolIdx members $memberId port_sub_default] [format \\\"using %s\\\" $pool__MemberDefaultPort] 5\\n        set memberColumn(Port) $pool__MemberDefaultPort\\n      }\\n    }\\n\\n    debug [list pools $poolIdx members $memberId normalized_config] [array get memberColumn] 7\\n\\n    if { [string length $memberColumn(AdvOptions)] > 0} {\\n      debug [list pools $poolIdx members $memberId adv_options] \\\"processing member advanced options string\\\" 7\\n      set memberColumn(AdvOptions) [format \\\" %s\\\" [process_options_string $memberColumn(AdvOptions) \\\"\\\" \\\"\\\"]]\\n    }\\n\\n    if { $node_exist } {\\n      # Node did exist, create <node name>:<port> string\\n      set memberColumn(Dest) [format \\\"%s:%s\\\" $memberColumn(IPAddress) $memberColumn(Port)]\\n    } else {\\n      # Node did not exist, get the correctly formatted ip, port string\\n      set memberColumn(Dest) [get_dest_str $memberColumn(IPAddress) $memberColumn(Port)]\\n    }\\n\\n\\tif { ![info exists ::pool_member_state($memberColumn(State))] } {\\n\\t\\terror \\\"The pool member state specified for $memberColumn(Dest) is not valid\\\"\\n\\t}\\n\\n\\tlappend postfinal_deferred_cmds [create_escaped_tmsh [format \\\"tmsh::modify ltm pool %s/%s members modify \\\\{ %s \\\\{ %s \\\\} \\\\}\\\" $app_path $poolNames($poolColumn(Index)) $memberColumn(Dest) $::pool_member_state($memberColumn(State))]]\\n\\n    append memberStr [format \\\" %s \\\\{ connection-limit %s ratio %s priority-group %s %s \\\\} \\\" $memberColumn(Dest) $memberColumn(ConnectionLimit) $memberColumn(Ratio) $memberColumn(PriorityGroup) $memberColumn(AdvOptions)]\\n  }\\n  append memberStr \\\" \\\\} \\\"\\n\\n  # Check to see if we really have any pool members after table processing\\n  if { $numMembers == 0 } {\\n    debug [list pools $poolIdx members] \\\"no true pool members found after table was processed, setting to none\\\" 5\\n    set memberStr \\\" members none\\\"\\n  }\\n\\n  debug [list pools $poolIdx member_str] \\\"memberStr=$memberStr\\\" 7\\n\\n  set poolColumn(AdvOptions) [lindex $poolColumn(AdvOptions) 0]\\n\\n  # We support multiple monitors and the ability to specify the minimum number of monitors that need\\n  # to pass for the pool to be considered healthy.  The format of the Monitor string from the Pool table is:\\n  #    (<monitor index>[,<monitor index>][;<minimum healthy>])\\n  #      For example:  0,1,2;3  specifies that this pool should associate the monitors created with\\n  #                             monitor index 0, 1 and 2 and that all 3 monitors need to pass for the\\n  #                             pool to be considered available.\\n  #\\n  # If no value is specifed no monitor is associated with the pool\\n  set monitor $poolColumn(Monitor)\\n  if { [string length $monitor] > 0 } {\\n    # Monitor info entered\\n    if { [string match \\\"*\\\\;*\\\" $monitor] } {\\n      # Min monitors specified\\n      set monitor [lindex $monitor 0]\\n      set monparts [split $monitor \\\\;]\\n      if { [llength $monparts] == 2 } {\\n        # Set the minimum number of monitors and list of monitors to associate\\n        set monmin [lindex $monparts 1]\\n        set monlist [split [lindex $monparts 0] ,]\\n      }\\n    } else {\\n      # Min monitors NOT specified, assume ALL monitors should pass and create list of monitors\\n      set monmin -1\\n      set monlist [split [lindex $poolColumn(Monitor) 0] ,]\\n    }\\n\\n    # Get the names of the monitors that were created above (array keyed by monitor index) and\\n    # check to make sure all monitors specified were actually created\\n    set monmapped {}\\n    foreach mon $monlist {\\n      if { [info exists monNames($mon)] } {\\n        lappend monmapped $monNames($mon)\\n      } else {\\n        error \\\"The monitor index '$mon' specified in pool index '$poolColumn(Index)' does not exist\\\"\\n      }\\n    }\\n\\n    # Setup our command\\n    if { $monmin > 0 } {\\n      set monitorCmd [format \\\"monitor min %s of { %s }\\\" $monmin [join $monmapped \\\" \\\"]]\\n    } else {\\n      set monitorCmd [format \\\"monitor \\\\\\\"%s\\\\\\\"\\\" [join $monmapped \\\" and \\\"]]\\n    }\\n  } else {\\n    # No monitor specified, set to none\\n    set monitorCmd \\\"monitor none\\\"\\n  }\\n\\n  # iCR does not like table columns with empty values.  Workaround this by allow use of keyword 'none' and NOOP\\n  if { [string tolower $poolColumn(AdvOptions)] == \\\"none\\\" } {\\n    set poolColumn(AdvOptions) \\\"\\\"\\n  }\\n\\n  # Setup the base pool create command\\n  set cmd [format \\\"ltm pool %s/%s %s %s \\\" $app_path $poolColumn(Name) $memberStr $monitorCmd]\\n\\n  array set pool_options {\\n    \\\"poolColumn(LbMethod)\\\" \\\"load-balancing-mode\\\"\\n    \\\"poolColumn(Description)\\\" \\\"description\\\"\\n  }\\n\\n  foreach {optionvar optioncmd} [array get pool_options] {\\n    append cmd [generic_add_option [list pools $poolIdx options] [set [subst $optionvar]] $optioncmd \\\"\\\" 0]\\n  }\\n\\n  if { [string length poolColumn(AdvOptions)] > 0 } {\\n    debug [list pools $poolIdx adv_options] \\\"processing advanced options string\\\" 7\\n    append cmd [format \\\" %s\\\" [process_options_string $poolColumn(AdvOptions) \\\"\\\" \\\"\\\"]]\\n  }\\n\\n  debug [list pools $poolIdx tmsh_create] $cmd 1\\n  tmsh::create $cmd\\n\\n  custom_extensions_after_pool\\n  incr poolIdx\\n}\\n\\nif { ![info exists poolIndexes($pool__DefaultPoolIndex)] \\n     && $pool__DefaultPoolIndex ne \\\"\\\" \\n     && $poolCount > 0 } {\\n  error \\\"The default pool index specified was not present in the pool table\\\"\\n}\\n\\n# Call the custom_extensions_after_pool proc to allow site-specific customizations\\ncustom_extensions_after_pools\\n\\n# Check to see if a vsName was specified... if not set to $app_vs\\nif { [string length $vs__Name] == 0 } {\\n  set vs__Name [format \\\"%s_default_vs_%s\\\" $app $pool__port]\\n  set addl_vs_basename [format \\\"%s_idx\\\" $app]\\n  change_var vs__Name $vs__Name\\n  debug [list virtual_server set_vs_name] [format \\\"no VS Name specified... setting to %s\\\" $vs__Name] 5\\n} else {\\n  set addl_vs_basename [format \\\"%s_idx\\\" $vs__Name]\\n}\\n\\n# Create L7 Traffic policy\\nset l7p_matchGroups [list]\\narray set l7p_matchGroupMap {}\\narray set l7p_matchRules {}\\nset l7p_actionGroups [list]\\narray set l7p_actionGroupMap {}\\narray set l7p_actionRules {}\\narray set l7p_requires {}\\narray set l7p_controls {}\\narray set l7p_asmrule {}\\narray set l7p_l7dosrule {}\\nset l7p_defer_create 0\\n\\nset l7p_numMatchRows [llength $l7policy__rulesMatch]\\nset l7p_numActionRows [llength $l7policy__rulesAction]\\ndebug \\\"l7policy\\\" [format \\\"numMatchRows=%s numActionRows=%s\\\" $l7p_numMatchRows, $l7p_numActionRows] 7\\n\\n# Prepare the l7p_matchGroups list and the associated l7p_matchGroupMap array.\\n# The list holds an ordered set of the discreet groups received\\n# The array holds a mapping of the group to it's associated rows in the table\\nset l7p_matchIdx 0\\nforeach l7p_matchRow $l7policy__rulesMatch {\\n  debug [list l7policy match_prep $l7p_matchIdx] [format \\\"matchRow=%s\\\" $l7p_matchRow] 9\\n\\n  array unset l7p_matchColumn\\n  array set l7p_matchColumn {}\\n  table_row_to_array $l7p_matchRow l7p_matchColumn ::table_defaults(L7P_Match)\\n\\n  if { [string tolower $l7p_matchColumn(Group)] != \\\"default\\\" && $l7p_matchColumn(Group) < 0 } {\\n    debug [list l7policy match_prep] \\\"skipping row, Group < 0\\\" 9\\n    incr l7p_matchIdx\\n    continue\\n  }\\n\\n  if { ![info exists l7p_matchGroupMap($l7p_matchColumn(Group))] } {\\n    set l7p_matchGroupMap($l7p_matchColumn(Group)) [list]\\n    lappend l7p_matchGroups $l7p_matchColumn(Group)\\n  }\\n  lappend l7p_matchGroupMap($l7p_matchColumn(Group)) $l7p_matchIdx\\n  incr l7p_matchIdx\\n}\\n\\n# Prepare the l7p_actionGroups list and the associated l7p_actionGroupMap array.\\n# The list holds an ordered set of the discreet groups received\\n# The array holds a mapping of the group to it's associated rows in the table\\nset l7p_actionIdx 0\\nforeach l7p_actionRow $l7policy__rulesAction {\\n  debug [list l7policy action_prep $l7p_actionIdx] [format \\\"actionRow=%s\\\" $l7p_actionRow] 9\\n\\n  array unset l7p_actionColumn\\n  array set l7p_actionColumn {}\\n  table_row_to_array $l7p_actionRow l7p_actionColumn ::table_defaults(L7P_Action)\\n\\n  if { [string tolower $l7p_actionColumn(Group)] != \\\"default\\\" && $l7p_actionColumn(Group) < 0 } {\\n    debug [list l7policy action_prep] \\\"skipping row, index < 0\\\" 9\\n    incr l7p_actionIdx\\n    continue\\n  }\\n\\n  if { ![info exists l7p_actionGroupMap($l7p_actionColumn(Group))] } {\\n    set l7p_actionGroupMap($l7p_actionColumn(Group)) [list]\\n    lappend l7p_actionGroups $l7p_actionColumn(Group)\\n  }\\n  lappend l7p_actionGroupMap($l7p_actionColumn(Group)) $l7p_actionIdx\\n  incr l7p_actionIdx\\n}\\n\\n# Perform a sanity check.  The number of groups should match between the match and action tables\\nforeach l7p_matchGroup $l7p_matchGroups {\\n  if { ! [info exists l7p_actionGroupMap($l7p_matchGroup)] } {\\n    error \\\"The L7 Policy Match Group '$l7p_matchGroup' was specified, however, an associated Action Group was not found\\\"\\n  }\\n}\\n\\n# Iterate through the l7p_matchGroups list (and the associated mapping array) and create our conditions.\\nforeach l7p_matchGroup $l7p_matchGroups {\\n  debug [list l7policy match $l7p_matchGroup] [format \\\"matchGroup=%s, mapping=%s\\\" $l7p_matchGroup $l7p_matchGroupMap($l7p_matchGroup)] 9\\n\\n  set l7p_matchRuleIdx 0\\n  foreach l7p_matchRule $l7p_matchGroupMap($l7p_matchGroup) {\\n    set l7p_matchRow [lindex $l7policy__rulesMatch $l7p_matchRule]\\n    debug [list l7policy match $l7p_matchGroup $l7p_matchRuleIdx] [format \\\"data=%s\\\" $l7p_matchRow] 9\\n\\n    array unset l7p_matchColumn\\n    array set l7p_matchColumn {}\\n    table_row_to_array $l7p_matchRow l7p_matchColumn ::table_defaults(L7P_Match)\\n\\n    # Determine which profile is required in the policy for the specified operand\\n    switch -glob [string tolower $l7p_matchColumn(Operand)] {\\n      client-ssl* { set l7p_requires(\\\"client-ssl\\\") 1 }\\n      http*       { set l7p_requires(\\\"http\\\") 1 }\\n      ssl*        { set l7p_requires(\\\"ssl-persistence\\\") 1 }\\n      tcp*        { set l7p_requires(\\\"tcp\\\") 1 }\\n      default {\\n        if { $l7p_matchColumn(Group) != \\\"default\\\" } {\\n          error \\\"Could not determine the correct profile type for L7 Policy Match, Group $l7p_matchColumn(Group), Operand $l7p_matchColumn(Operand)\\\"\\n        }\\n      }\\n    }\\n\\n    # Set our tmsh modifiers\\n    if { [string tolower $l7p_matchColumn(Negate)] == \\\"no\\\" } { set l7p_matchColumn(Negate) \\\"\\\" }\\n    if { [string tolower $l7p_matchColumn(Negate)] == \\\"yes\\\" } { set l7p_matchColumn(Negate) \\\"not\\\" }\\n    if { [string tolower $l7p_matchColumn(Missing)] == \\\"no\\\" } { set l7p_matchColumn(Missing) \\\"\\\" }\\n    if { [string tolower $l7p_matchColumn(Missing)] == \\\"yes\\\" } { set l7p_matchColumn(Missing) \\\"missing\\\" }\\n    if { [string tolower $l7p_matchColumn(CaseSensitive)] == \\\"no\\\" } { set l7p_matchColumn(CaseSensitive) \\\"case-insensitive\\\" }\\n    if { [string tolower $l7p_matchColumn(CaseSensitive)] == \\\"yes\\\" } { set l7p_matchColumn(CaseSensitive) \\\"case-sensitive\\\" }\\n\\n    # Process the operand.  The '/' character gets replaced with a ' ' to build the tmsh\\n    # command.  Additionally the ',' character gets replaced with a ' ' to allow for multiple\\n    # values to be passed to the operand.\\n    set l7p_match_oper [split $l7p_matchColumn(Operand) /]\\n    if { [llength $l7p_match_oper] > 0 } {\\n      set l7p_rule_opertmp [join $l7p_match_oper \\\" \\\"]\\n      set l7p_rule_valtmp \\\"\\\"\\n      if { [string length $l7p_matchColumn(Value)] > 0 } {\\n        set l7p_rule_valtmp [format \\\"%s %s values { \\\\\\\"%s\\\\\\\" }\\\" $l7p_matchColumn(Negate) $l7p_matchColumn(Condition) [string map {, \\\"\\\\\\\" \\\\\\\"\\\"} $l7p_matchColumn(Value)]]\\n      }\\n      lappend l7p_matchRules($l7p_matchGroup) [format \\\"%s { %s %s %s %s }\\\" $l7p_matchRuleIdx $l7p_rule_opertmp $l7p_matchColumn(Missing) $l7p_matchColumn(CaseSensitive) $l7p_rule_valtmp]\\n    } else {\\n      lappend l7p_matchRules($l7p_matchGroup) \\\"\\\"\\n    }\\n    debug [list l7policy match $l7p_matchGroup $l7p_matchRuleIdx] [format \\\"rule=%s\\\" [lindex $l7p_matchRules($l7p_matchGroup) $l7p_matchRuleIdx]] 7\\n    incr l7p_matchRuleIdx\\n  }\\n}\\n\\n# Iterate through the l7p_actionGroups list (and the associated mapping array) and create our actions.\\nforeach l7p_actionGroup $l7p_actionGroups {\\n  debug [list l7policy action $l7p_actionGroup] [format \\\"actionGroup=%s, mapping=%s\\\" $l7p_actionGroup $l7p_actionGroupMap($l7p_actionGroup)] 9\\n\\n  set l7p_actionRuleIdx 0\\n  foreach l7p_actionRule $l7p_actionGroupMap($l7p_actionGroup) {\\n    set l7p_actionRow [lindex $l7policy__rulesAction $l7p_actionRule]\\n    debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx] [format \\\"data=%s\\\" $l7p_actionRow] 9\\n\\n    array unset l7p_actionColumn\\n    array set l7p_actionColumn {}\\n    table_row_to_array $l7p_actionRow l7p_actionColumn ::table_defaults(L7P_Action)\\n\\n    if { [string tolower $l7p_actionColumn(Group)] == \\\"default\\\" } {\\n      set l7p_action_found_default 1\\n    }\\n\\n    # Determine which profile is required in the policy for the specified operand\\n    switch -glob [string tolower $l7p_actionColumn(Target)] {\\n      asm*            {\\n                        set l7p_controls(\\\"asm\\\") 1\\n                        set l7p_asmrule($l7p_actionGroup) 1\\n                      }\\n      cache*          { set l7p_controls(\\\"cache\\\") 1 }\\n      *compress*      { set l7p_controls(\\\"compression\\\") 1 }\\n      forward*        { set l7p_controls(\\\"forwarding\\\") 1 }\\n      http*           { set l7p_controls(\\\"forwarding\\\") 1 }\\n      l7dos*          {\\n                        set l7p_controls(\\\"l7dos\\\") 1\\n                        set l7p_controls(\\\"asm\\\") 1\\n                        set l7p_l7dosrule($l7p_actionGroup) 1\\n                      }\\n      log*            { set l7p_controls(\\\"forwarding\\\") 1 }\\n      request-adapt*  { set l7p_controls(\\\"request-adaption\\\") 1 }\\n      response-adapt* { set l7p_controls(\\\"response-adaptions\\\") 1 }\\n      server-ssl*     { set l7p_controls(\\\"server-ssl\\\") 1 }\\n      tcp-nagle*      { set l7p_controls(\\\"forwarding\\\") 1 }\\n      tcl*            { set l7p_controls(\\\"tcl\\\") 1 }\\n      default {\\n        error \\\"Could not determine the correct profile type for L7 Policy Action, Group $l7p_actionColumn(Group), Target $l7p_actionColumn(Target)\\\"\\n      }\\n    }\\n\\n    # Process the target(s).  Multiple targets/parameters are delimited by a '|' seperator.  The '/' character\\n    # gets replaced with a ' ' to build the tmsh command.  We then determine the type of target by\\n    # counting the number unique target elements.  3 element targets don't require a parameter\\n    # (eg: forward/request/reset). 4 element target require parameters.  We then parse the 4th element\\n    # as a comma-seperated string to determine the number of unique parameters required.  The\\n    # entered parameter is checked to ensure a parameters are entered (can be blank) and the the\\n    # tmsh command is created.\\n    set l7p_action_target_chunk \\\"\\\"\\n    set l7p_action_targets [split $l7p_actionColumn(Target) /]\\n    switch [llength $l7p_action_targets] {\\n      3 {\\n        set l7p_rule_targettmp [join $l7p_action_targets \\\" \\\"]\\n        set l7p_action_target_chunk [format \\\"%s \\\\{ %s \\\\}\\\" $l7p_actionRuleIdx $l7p_rule_targettmp]\\n        debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx 3_elements] [format \\\"chunk=%s\\\" $l7p_action_target_chunk] 7\\n       }\\n      4 {\\n        set l7p_rule_targettmp [format \\\"%s %s %s\\\" [lindex $l7p_action_targets 0] [lindex $l7p_action_targets 1] [lindex $l7p_action_targets 2]]\\n        set l7p_rule_parameters [psplit [lindex $l7p_action_targets 3] ,]\\n        # Fix the list in the case that we got a reserved character\\n        if { [llength $l7p_actionColumn(Parameter)] == 1 } {\\n          set l7p_actionColumn(Parameter) [lindex $l7p_actionColumn(Parameter) 0]\\n        }\\n\\n        set l7p_rule_values [psplit $l7p_actionColumn(Parameter) ,]\\n        debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx val_list] $l7p_actionColumn(Parameter) 7\\n\\n        set l7p_action_parIdx 0\\n\\n        set l7p_action_target_chunk [format \\\"%s \\\\{ %s \\\" $l7p_actionRuleIdx  $l7p_rule_targettmp]\\n        foreach l7p_action_parameter $l7p_rule_parameters {\\n          if { [llength $l7p_rule_parameters] == 1 } {\\n            set l7p_action_parameter_value $l7p_actionColumn(Parameter)\\n          } else {\\n            set l7p_action_parameter_value [lindex $l7p_rule_values $l7p_action_parIdx]\\n          }\\n\\n          # Special handling for forward/request/select/(pool|clone-pool).  Either a full path to\\n          # a pool can be entered (eg: /Common/mypool) or the index of a pool created in the pool__Pools\\n          # table can be referenced.  If a pool index is referenced we replace it here with the name\\n          # of the pool\\n          switch -regexp $l7p_actionColumn(Target) {\\n            ^.*(pool|clone-pool)$ {\\n              set l7p_action_parameter_poolidx -1\\n              if { [regexp {^pool:[0-9]+$} $l7p_action_parameter_value] } {\\n                set l7p_action_parameter_poolidx [lindex [split $l7p_action_parameter_value :] 1]\\n                debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx pool_substitute] [format \\\"idx=%s val=%s name=%s\\\" $l7p_action_parameter_poolidx $l7p_action_parameter_value $poolNames($l7p_action_parameter_poolidx)] 7\\n                set l7p_action_parameter_value [format \\\"%s/%s\\\" $app_path $poolNames($l7p_action_parameter_poolidx)]\\n              }\\n            }\\n            ^asm.*enable.*$ {\\n              if { [regexp {^bundled:(.*$)} $l7p_action_parameter_value -> l7p_action_parameter_asmpolicy] } {\\n                debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx asm_policy] [format \\\"%s\\\" $l7p_action_parameter_asmpolicy] 7\\n                if { ! [string match *$l7p_action_parameter_asmpolicy* $vs__BundledItems] } {\\n                  error \\\"L7 Policy Action Rule with Group $l7p_actionGroup Index $l7p_actionRuleIdx specified a bundled policy that wasn't selected for deployment\\\"\\n                }\\n                set l7p_action_parameter_asmpolicy [string map [list \\\"%APP_NAME%\\\" $app] $l7p_action_parameter_asmpolicy]\\n                set l7p_action_parameter_value [format \\\"%s/%s\\\" $app_path $l7p_action_parameter_asmpolicy]\\n                # Flag deferred creation of the policy because of bundled ASM policy\\n                set l7p_defer_create 1\\n              }\\n            }\\n          }\\n\\n          append l7p_action_target_chunk [format \\\"%s \\\\\\\"%s\\\\\\\" \\\" $l7p_action_parameter $l7p_action_parameter_value]\\n          incr l7p_action_parIdx\\n        }\\n        append l7p_action_target_chunk \\\"\\\\} \\\"\\n        debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx 4_element] [format \\\"chunk=%s\\\" $l7p_action_target_chunk] 7\\n      }\\n      default { error \\\"The target $l7p_actionColumn(Target) could not be processed\\\" }\\n    }\\n    lappend l7p_actionRules($l7p_actionGroup) $l7p_action_target_chunk\\n    debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx] [format \\\"rule=%s\\\" [lindex $l7p_actionRules($l7p_actionGroup) $l7p_actionRuleIdx]] 7\\n    incr l7p_actionRuleIdx\\n  }\\n  debug [list l7policy action $l7p_actionGroup] [format \\\"rules=%s\\\" $l7p_actionRules($l7p_actionGroup)] 7\\n}\\n\\nif { [info exists l7p_controls(\\\"asm\\\")] && ! $l7p_action_found_default } {\\n  error \\\"A 'default' L7 Policy Action must be defined if you wish you use an ASM policy\\\"\\n}\\n\\n# Build our L7 ruleset\\nset l7p_cmd_rules \\\"rules replace-all-with \\\\{ \\\"\\nset l7p_ruleIdx 0\\nforeach l7p_matchGroup $l7p_matchGroups {\\n  debug [list l7policy rules $l7p_matchGroup \\\"match \\\"] $l7p_matchRules($l7p_matchGroup) 7\\n  debug [list l7policy rules $l7p_matchGroup action] $l7p_actionRules($l7p_matchGroup) 7\\n\\n  # If an ASM target was selected we must add a bypass action to each action in the ruleset\\n  # that does not contain an ASM target\\n  set l7p_rule_asmdefault \\\"\\\"\\n  if { ![info exists l7p_asmrule($l7p_matchGroup)] && [info exists l7p_controls(\\\"asm\\\")] } {\\n    if { [string tolower $l7policy__defaultASM] != \\\"bypass\\\" } {\\n      if { [regexp {^bundled:(.*$)} $l7policy__defaultASM -> l7p_action_default_asmpolicy] } {\\n        debug [list l7policy l7policy rules $l7p_matchGroup action default_asmpolicy] [format \\\"%s\\\" $l7p_action_default_asmpolicy] 7\\n        if { ! [string match *$l7p_action_default_asmpolicy* $vs__BundledItems] } {\\n          error \\\"L7 Policy Default ASM Policy specified a bundled policy that wasn't selected for deployment\\\"\\n        }\\n        set l7policy__defaultASM [format \\\"%s/%s\\\" $app_path $l7p_action_default_asmpolicy]\\n        set l7p_defer_create 1\\n      }\\n      set l7p_rule_asmdefault [format \\\" 98 { asm request enable policy %s } \\\" $l7policy__defaultASM]\\n      set l7p_controls(\\\"asm\\\") 1\\n    } else {\\n      set l7p_rule_asmdefault \\\" 98 { asm request disable } \\\"\\n    }\\n  }\\n\\n  set l7p_rule_l7dosdefault \\\"\\\"\\n  if { ![info exists l7p_l7dosrule($l7p_matchGroup)] && [info exists l7p_controls(\\\"l7dos\\\")] } {\\n    if { [string tolower $l7policy__defaultL7DOS] != \\\"bypass\\\" } {\\n      set l7p_rule_l7dosdefault [format \\\" 99 { l7dos request enable from-profile %s } \\\" $l7policy__defaultL7DOS]\\n      set l7p_controls(\\\"asm\\\") 1\\n      set l7p_controls(\\\"l7dos\\\") 1\\n    } else {\\n      set l7p_rule_l7dosdefault \\\" 99 { l7dos request disable } \\\"\\n    }\\n  }\\n\\n  set l7p_rule_default [format \\\"%s %s\\\" $l7p_rule_asmdefault $l7p_rule_l7dosdefault]\\n\\n  set l7p_rule_condpart \\\"\\\"\\n  if { [llength $l7p_matchRules($l7p_matchGroup)] > 0 && [string length [lindex $l7p_matchRules($l7p_matchGroup) 0]] > 0 } {\\n    set l7p_rule_condpart [format \\\"conditions replace-all-with \\\\{ %s \\\\}\\\" [join $l7p_matchRules($l7p_matchGroup) \\\" \\\"]]\\n  }\\n  set l7p_rule_actionpart [format \\\"actions replace-all-with \\\\{ %s %s \\\\}\\\" [join $l7p_actionRules($l7p_matchGroup) \\\" \\\"] $l7p_rule_default]\\n  append l7p_cmd_rules [format \\\"%s \\\\{ %s %s ordinal %s \\\\} \\\" $l7p_matchGroup $l7p_rule_condpart $l7p_rule_actionpart [expr {$l7p_ruleIdx+1}]]\\n  incr l7p_ruleIdx\\n}\\n\\n# Finish building the tmsh command and execute it\\nset l7p_cmd_requires [format \\\" requires replace-all-with { %s } \\\" [join [array names l7p_requires] \\\" \\\"]]\\nset l7p_cmd_controls [format \\\" controls replace-all-with { %s } \\\" [join [array names l7p_controls] \\\" \\\"]]\\n\\n# TMOS 12.1 introduced a new draft/publish model for L7 policies.  Check for\\n# that version and set a mode accordingly\\nif { [string match \\\"12.1*\\\" $version_info(version)] } {\\n  debug [list l7policy version_check] \\\"12.1 or newer detected\\\" 7\\n  set l7p_new_model 1\\n} else {\\n  debug [list l7policy version_check] \\\"12.0 or older detected\\\" 7\\n  set l7p_new_model 0\\n}\\n\\nif { $l7p_new_model } {\\n  if { $l7p_defer_create > 0 } {\\n    set l7p_cmd [format \\\"ltm policy %s/Drafts/%s_l7policy\\\" $app_path $app]\\n  } else {\\n    set l7p_cmd [format \\\"ltm policy %s/Drafts/%s_l7policy legacy\\\" $app_path $app]\\n  }\\n  set l7p_publish_cmd [format \\\"ltm policy %s/Drafts/%s_l7policy\\\" $app_path $app]\\n} else {\\n  set l7p_cmd [format \\\"ltm policy %s/%s_l7policy\\\" $app_path $app]\\n  set l7p_defer_cmd $l7p_cmd\\n}\\n\\nappend l7p_cmd [format \\\" strategy %s %s %s %s \\\\}\\\" $l7policy__strategy $l7p_cmd_requires $l7p_cmd_controls $l7p_cmd_rules]\\ndebug [list l7policy l7p_cmd] $l7p_cmd 7\\n\\nif { [llength $l7p_matchGroups] > 0 && [llength $l7p_actionGroups] > 0 } {\\n  if { $l7p_defer_create > 0 } {\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh [format \\\"tmsh::create sys folder %s/Drafts\\\" $app_path]]]\\n    \\n    debug [list l7policy defer_create] $l7p_cmd 1\\n    set l7p_cmd_create [format \\\"tmsh::create %s\\\" $l7p_cmd]\\n    set l7p_cmd_modify [format \\\"tmsh::modify %s\\\" $l7p_cmd]\\n\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh $l7p_cmd_modify]]\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh $l7p_cmd_create]]\\n\\n    if { $l7p_new_model } {\\n    \\tlappend bundler_deferred_cmds [format \\\"catch { tmsh::publish %s }\\\" [create_escaped_tmsh $l7p_publish_cmd]]\\n    }\\n\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh [format \\\"tmsh::modify ltm virtual %s/%s profiles add \\\\{ /Common/websecurity \\\\{ \\\\} \\\\}\\\" $app_path $vs__Name]]]\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh [format \\\"tmsh::modify ltm virtual %s/%s policies add \\\\{ %s/%s_l7policy \\\\}\\\" $app_path $vs__Name $app_path $app]]]\\n\\n    if { $l7p_new_model } {\\n      lappend bundler_deferred_cmds [format \\\"tmsh::delete sys folder %s/Drafts \\\" $app_path]\\n    }\\n  } else {\\n    tmsh::create [format \\\"sys folder %s/Drafts\\\" $app_path]\\n    debug [list l7policy tmsh_create] $l7p_cmd 1\\n    tmsh::create $l7p_cmd\\n  \\tif { $l7p_new_model } {\\n  \\t\\tdebug [list l7policy tmsh_publish] $l7p_publish_cmd 1\\n  \\t\\ttmsh::publish $l7p_publish_cmd\\n      tmsh::delete [format \\\"sys folder %s/Drafts\\\" $app_path]\\n  \\t}\\n\\n    # Add the created policy to the vs__AdvPolicies variable so we attach it to the\\n    # Virtual Server when it's created.\\n    append vs__AdvPolicies [format \\\" %s/%s_l7policy \\\" $app_path $app]\\n    debug [list l7policy add_policy_to_vs] [format \\\"vs__AdvPolicies=%s\\\" $vs__AdvPolicies] 5\\n  }\\n} else {\\n  debug [list l7policy skip_creation] \\\"No valid actions or rules after processing, skipping creation\\\" 7\\n}\\n\\n# Call the custom_extensions_before_vs proc to allow site-specific customizations\\ncustom_extensions_before_vs\\n\\n# Create virtual Server\\n\\n# Process the HTTP dependent features\\nif { [string length $vs__ProfileHTTP] > 0 } {\\n  # Process the 'auto' flag for feature__redirectToHTTPS\\n  if { $feature__redirectToHTTPS eq \\\"auto\\\" && $pool__port eq \\\"443\\\" && $pool__addr ne \\\"255.255.255.254\\\"} {\\n    debug [list virtual_server feature__redirectToHTTPS] \\\"found auto flag and port is 443, setting feature to enabled\\\" 5\\n    set feature__redirectToHTTPS enabled\\n  }\\n\\n  # Process the 'auto' flag for feature__insertXForwardedFor\\n  if { $feature__insertXForwardedFor eq \\\"auto\\\" && $vs__SNATConfig ne \\\"\\\"} {\\n    debug [list virtual_server feature__insertXForwardedFor] \\\"found auto flag, port is 443 or 80 and SNAT enabled, setting feature to enabled\\\" 5\\n    set feature__insertXForwardedFor enabled\\n  }\\n}\\n\\n# Process the vs__ProfileSecurityIPBlacklist option.\\nset ipi_mode 0\\nswitch -glob [string tolower $vs__ProfileSecurityIPBlacklist] {\\n  enabled-block { set ipi_action \\\"drop\\\" }\\n  enabled-log   { set ipi_action \\\"accept\\\" }\\n  none          { set ipi_mode 0 }\\n  /*            { set ipi_mode 2 }\\n  default {\\n    set ipi_create 0\\n    set vs__ProfileSecurityIPBlacklist none\\n  }\\n}\\n\\n# Process feature__easyL4Firewall options\\nset afm_auto_ipistring \\\"\\\"\\nif { [is_provisioned afm] && $pool__addr != \\\"255.255.255.254\\\" } {\\n  switch [string tolower $feature__easyL4Firewall] {\\n    auto {\\n      debug [list virtual_server feature__easyL4Firewall] \\\"found auto option, setting feature to enabled\\\" 5\\n      set feature__easyL4Firewall enabled\\n      set afm_auto_ipistring \\\"none\\\"\\n    }\\n    base {\\n      debug [list virtual_server feature__easyL4Firewall] \\\"found base flag, setting feature to enabled, vs__ProfileSecurityIPBlacklist to disabled\\\" 5\\n      set feature__easyL4Firewall enabled\\n      set afm_auto_ipistring \\\"none\\\"\\n    }\\n    base+ip_blacklist_block {\\n      debug [list virtual_server feature__easyL4Firewall] \\\"found auto option, setting feature to enabled, vs__ProfileSecurityIPBlacklist to enabled-block\\\" 5\\n      set feature__easyL4Firewall enabled\\n      set afm_auto_ipistring \\\"enabled-block\\\"\\n    }\\n    base+ip_blacklist_log {\\n      debug [list virtual_server feature__easyL4Firewall] \\\"found base+ipblacklist_log option, setting feature to enabled, vs__ProfileSecurityIPBlacklist to enabled-log\\\" 5\\n      set feature__easyL4Firewall enabled\\n      set afm_auto_ipistring \\\"enabled-log\\\"\\n    }\\n    default {\\n      if { [get_var feature__easyL4Firewall] == \\\"auto\\\"} {\\n        set afm_auto_ipistring \\\"none\\\"\\n      }\\n      set feature__easyL4Firewall disabled\\n    }\\n  }\\n  if { $ipi_mode < 2 } {\\n    change_var vs__ProfileSecurityIPBlacklist $afm_auto_ipistring\\n  }\\n} else {\\n  debug [list virtual_server feature__easyL4Firewall] \\\"AFM not provisioned, skipping\\\" 5\\n  if { $feature__easyL4Firewall != \\\"auto\\\" } {\\n    change_var feature__easyL4Firewall disabled\\n  }\\n  set feature__easyL4Firewall disabled\\n}\\n\\n# Check for HTTP Strict Transport Security (HSTS) option.  We do this here\\n# so the irule can be easily appended to the existing iRule list\\nif { $clientssl > 0 && [string match enabled* $feature__securityEnableHSTS] } {\\n  # include iRules used for feature__securityEnableHSTS\\n  set irule_HSTS {\\n    when HTTP_RESPONSE {\\n  HTTP::header insert Strict-Transport-Security \\\"%HSTSOPTIONS%\\\"\\n}\\n  }; # end irule_HSTS\\n  set irule_HSTS_redirect {\\n    when HTTP_REQUEST {\\n  HTTP::respond 301 Location \\\"https://[getfield [HTTP::host] \\\":\\\" 1][HTTP::uri]\\\"\\n}\\n  };\\n\\n  debug [list virtual_server feature__securityEnableHSTS] \\\"creating HSTS iRule\\\" 5\\n  set hstsrule [format \\\"%s/hsts_irule\\\" $app_path]\\n\\n  # Substitute in HSTS options is specified\\n  if { [string match \\\"*;*\\\" $feature__securityEnableHSTS] } {\\n    set hstsoptions [format \\\"%s\\\\; \\\" [lindex [split $feature__securityEnableHSTS \\\\;] 1]]\\n    set feature__securityEnableHSTS [lindex [split $feature__securityEnableHSTS \\\\;] 0]\\n    debug [list virtual_server feature__securityEnableHSTS options] $hstsoptions 7\\n  } else {\\n    set hstsoptions \\\"max-age=31536000; \\\"\\n  }\\n\\n  switch [string tolower $feature__securityEnableHSTS] {\\n    enabled-preload { append hstsoptions \\\"preload\\\" }\\n    enabled-subdomain { append hstsoptions \\\"includeSubDomains\\\" }\\n    enabled-preload-subdomain { append hstsoptions \\\"includeSubDomains\\\\; preload\\\" }\\n    default { error \\\"An invalid option was specified for feature__securityEnableHSTS\\\" }\\n  }\\n\\n  set irule_HSTS_final [string map [list %HSTSOPTIONS% $hstsoptions] $irule_HSTS]\\n\\n  set hstscmd \\\"ltm rule $hstsrule $irule_HSTS_final\\\"\\n  debug [list virtual_server feature__securityEnableHSTS tmsh_create] $hstscmd 1\\n  tmsh::create $hstscmd\\n\\n  if { $feature__redirectToHTTPS eq \\\"enabled\\\"} {\\n    debug [list virtual_server feature__securityEnableHSTS ssl_redirect_check] \\\"feature_redirectToHTTPS enabled, creating HSTS redirect iRule\\\" 5\\n    set hstsredirectrule [format \\\"%s/hsts_redirect_irule\\\" $app_path]\\n    set hstsredirectcmd \\\"ltm rule $hstsredirectrule $irule_HSTS_redirect\\\"\\n    debug [list virtual_server feature__securityEnableHSTS tmsh_create] $hstsredirectcmd 1\\n    tmsh::create $hstsredirectcmd\\n  }\\n\\n  if { [string length $vs__Irules] > 0 } {\\n    append vs__Irules \\\",$hstsrule\\\"\\n  } else {\\n    set vs__Irules $hstsrule\\n  }\\n  debug [list virtual_server feature__securityEnableHSTS add_irule_to_vs] [format \\\"vs__Irules=%s\\\" $vs__Irules] 7\\n}\\n\\nset cmd [format \\\"ltm virtual %s/%s \\\" $app_path $vs__Name]\\n\\n# Setup our listener destination address\\nset vs_dest_addr [get_dest_addr $pool__addr]\\n\\n# Keep vs_dest_addr as is for use by other features, create vs_dest with full <ip>%<rd>:<port> format\\nset vs_dest [get_dest_str $vs_dest_addr $pool__port]\\n\\ndebug [list virtual_server set_dest] [format \\\"vs_dest_addr=%s vs_dest=%s\\\" $vs_dest_addr $vs_dest] 7\\n\\n# Set virtual server options we support.  This array assumes a format \\\" <option> <input value>\\\" for the TMSH command.\\narray set vs_options {\\n \\\"pool__mask\\\" \\\"mask\\\"\\n \\\"vs_dest\\\" \\\"destination\\\"\\n \\\"vs__IpProtocol\\\" \\\"ip-protocol\\\"\\n \\\"vs__ConnectionLimit\\\" \\\"connection-limit\\\"\\n \\\"vs__Description\\\" \\\"description\\\"\\n \\\"vs__SourceAddress\\\" \\\"source\\\"\\n \\\"vs__OptionSourcePort\\\" \\\"source-port\\\"\\n \\\"vs__OptionConnectionMirroring\\\" \\\"mirror\\\"\\n \\\"vs__ProfileFallbackPersist\\\" \\\"fallback-persistence\\\"\\n \\\"vs__ProfilePerRequest\\\" \\\"per-flow-request-access-policy\\\"\\n}\\n\\nif { [string length $default_pool_name] > 0 } {\\n  set vs_options(default_pool_name) \\\"pool\\\"\\n}\\n\\n# Set virtual server options we support.  This array allows specifcation of the specific TMSH command format\\narray set vs_options_custom {\\n \\\"vs__Irules\\\" \\\" rules \\\\{ %s \\\\} \\\"\\n \\\"vs__ProfileDefaultPersist\\\" \\\" persist replace-all-with \\\\{ %s \\\\} \\\"\\n \\\"vs__ProfileSecurityLogProfiles\\\" \\\" security-log-profiles replace-all-with \\\\{ %s \\\\} \\\"\\n}\\n\\n# Process the create: option for persistence profiles\\narray set persist_create_defaults {\\n  \\\"cookie\\\" { default \\\"/Common/cookie\\\" }\\n  \\\"dest-addr\\\" { default \\\"/Common/dest_addr\\\" }\\n  \\\"hash\\\" { default \\\"/Common/hash\\\" }\\n  \\\"msrdp\\\" { default \\\"/Common/msrdp\\\" }\\n  \\\"sip\\\" { default \\\"/Common/sip_info\\\" }\\n  \\\"source-addr\\\" { default \\\"/Common/source_addr\\\" }\\n  \\\"ssl\\\" { default \\\"/Common/ssl\\\" }\\n  \\\"universal\\\" { default \\\"/Common/universal\\\" }\\n}\\n\\n# Loop over the two fields that allow this option\\nforeach persist_var [list vs__ProfileDefaultPersist vs__ProfileFallbackPersist] {\\n  set persist_val [set [subst $persist_var]]\\n  set persist_type \\\"\\\"\\n  if { [regexp -nocase {^create:} $persist_val] } {\\n    set persist_val [string map {\\\"create:\\\" \\\"\\\"} $persist_val]\\n\\n    # Process the string, check to see the persistence type was specified and is valid\\n    array set persist_options [process_kvp_string $persist_val]\\n    if { ! [info exists persist_options(type)] } {\\n      error \\\"The create string specified for $persist_var needs to include a 'type=(cookie|dest-addr|hash|msrdp|sip|source-addr|ssl|universal)' option\\\"\\n    }\\n\\n    if { ! [info exists persist_create_defaults($persist_options(type))] } {\\n      error \\\"The persistence type '$persist_options(type)' specified for $persist_var is not valid\\\"\\n    }\\n\\n    # Set some inital values\\n    array set persist_attr [subst $::persist_create_defaults($persist_options(type))]\\n    set persist_name [format \\\"%s_persistence_%s\\\" $app $persist_options(type)]\\n    set persist_cmd [format \\\"ltm persistence %s %s/%s \\\" $persist_options(type) $app_path $persist_name]\\n\\n    # Remove the 'type=XXX;' field from the create string\\n    set persist_val [string map [list \\\"type=$persist_options(type);\\\" \\\"\\\"] $persist_val]\\n\\n    # Process the rest of the options and get the TMSH string portion for options\\n    set persist_option_cmd [process_options_string $persist_val \\\"persistence $persist_options(type)\\\" $persist_attr(default) 1]\\n    debug [list virtual_server persistence create_handler $persist_var $persist_options(type)] [format \\\"%s\\\" $persist_option_cmd] 7\\n\\n    # Build our full TMSH command\\n    append persist_cmd $persist_option_cmd\\n\\n    # Reset the APL var to point to the new profile name\\n    set [subst $persist_var] [format \\\"%s/%s\\\" $app_path $persist_name]\\n    debug [list virtual_server persistence create_handler $persist_var $persist_options(type)] [format \\\"%s=%s\\\" $persist_var [set [subst $persist_var]]] 1\\n    debug [list virtual_server persistence create_handler $persist_var $persist_options(type) tmsh_create] [format \\\"%s\\\" $persist_cmd] 1\\n    tmsh::create $persist_cmd\\n  }\\n}\\n\\nhandle_opt_remove_on_redeploy vs__ProfilePerRequest \\\"\\\" \\\"per-flow-request-access-policy\\\" \\\"apm\\\"\\nhandle_opt_remove_on_redeploy vs__ProfileSecurityIPBlacklist \\\"none\\\" \\\"ip-intelligence-policy\\\" \\\"ltm\\\"\\n\\n# Process the vs__ProfileSecurityIPBlacklist option according to $ipi_mode set above\\nif { $ipi_mode == 1 } {\\n  debug [list virtual_server ip_blacklist create] [format \\\"ipi_action=%s, creating IPI policy\\\" $ipi_action] 7\\n  set ipi_name [create_obj_name \\\"ip_blacklist\\\"]\\n  set ipi_cmd [format \\\"security ip-intelligence policy %s default-action %s default-log-blacklist-hit-only yes\\\" $ipi_name $ipi_action]\\n  debug [list virtual_server ip_blacklist tmsh_create] $ipi_cmd 1\\n  tmsh::create $ipi_cmd\\n  set vs__ProfileSecurityIPBlacklist $ipi_name\\n  array set vs_options [list vs__ProfileSecurityIPBlacklist ip-intelligence-policy]\\n}\\n\\nif { $ipi_mode == 2 } {\\n  debug [list virtual_server ip_blacklist associate] [format \\\"adding existing IPI policy %s\\\" $vs__ProfileSecurityIPBlacklist] 7\\n  array set vs_options [list vs__ProfileSecurityIPBlacklist ip-intelligence-policy]\\n}\\n\\n# Process the feature__easyL4Firewall option\\nhandle_opt_remove_on_redeploy feature__easyL4Firewall \\\"disabled\\\" \\\"fw-enforced-policy\\\" \\\"afm\\\"\\n\\nif { $feature__easyL4Firewall == \\\"enabled\\\" } {\\n  debug [list virtual_server l4_firewall] \\\"creating FW policy\\\" 5\\n\\n  set cidr_blacklist [single_column_table_to_list $feature__easyL4FirewallBlacklist \\\"CIDRRange\\\"]\\n  debug [list virtual_server l4_firewall cidr_blacklist] $cidr_blacklist 7\\n\\n  set cidr_sourcelist [single_column_table_to_list $feature__easyL4FirewallSourceList \\\"CIDRRange\\\"]\\n  debug [list virtual_server l4_firewall cidr_sourcelist] $cidr_sourcelist 7\\n\\n  if { [llength $cidr_blacklist] > 0 } {\\n    debug [list virtual_server l4_firewall create_blacklist] \\\"creating static blacklist address-list\\\" 7\\n    set feature_easyL4Firewall_blacklistcmd [format \\\"security firewall address-list %s/afm_staticBlacklist addresses replace-all-with { %s }\\\" \\\\\\n     $app_path [join $cidr_blacklist \\\" \\\"]]\\n\\n    debug [list virtual_server l4_firewall create_blacklist tmsh_create] $feature_easyL4Firewall_blacklistcmd 1\\n    tmsh::create $feature_easyL4Firewall_blacklistcmd\\n    set feature_easyL4Firewall_blacklisttmpl [format \\\"staticBlacklist { action drop source { address-lists replace-all-with { %s/afm_staticBlacklist } } }\\\" $app_path]\\n  } else {\\n    set feature_easyL4Firewall_blacklisttmpl \\\"\\\"\\n  }\\n\\n  if { [llength $cidr_sourcelist] > 0 } {\\n    debug [list virtual_server l4_firewall create_sourcelist] \\\"creating source address-list\\\" 7\\n    set feature_easyL4Firewall_srclistcmd [format \\\"security firewall address-list %s/afm_sourceList addresses replace-all-with { %s }\\\" \\\\\\n     $app_path [join $cidr_sourcelist \\\" \\\"]]\\n\\n    debug [list virtual_server l4_firewall create_sourcelist tmsh_create] $feature_easyL4Firewall_srclistcmd 1\\n    tmsh::create $feature_easyL4Firewall_srclistcmd\\n  } else {\\n    debug [list virtual_server l4_firewall create_sourcelist] \\\"creating DEFAULT source address-list\\\" 7\\n    set feature_easyL4Firewall_srclistcmd [format \\\"security firewall address-list %s/afm_sourceList addresses replace-all-with { 0.0.0.0/0 }\\\" $app_path]\\n\\n    debug [list virtual_server l4_firewall create_sourcelist tmsh_create] $feature_easyL4Firewall_srclistcmd 1\\n    tmsh::create $feature_easyL4Firewall_srclistcmd\\n  }\\n  set feature_easyL4Firewall_srclist [format \\\"%s/afm_sourceList\\\" $app_path]\\n\\n  set fw_name [create_obj_name \\\"firewall\\\"]\\n  set fw_cmd [format \\\"\\\"]\\n  set fw_tmpl {\\nsecurity firewall policy %NAME% {\\n    rules replace-all-with {\\n        %STATIC_BLACKLIST%\\n        allowFrom {\\n            action accept\\n            ip-protocol %IP_PROTOCOL%\\n            source {\\n                address-lists replace-all-with {\\n                    %SOURCE_LIST%\\n                }\\n            }\\n        }\\n        defaultDeny {\\n            action drop\\n            ip-protocol %IP_PROTOCOL%\\n            log yes\\n            source {\\n                addresses replace-all-with {\\n                    0.0.0.0/0 { }\\n                }\\n            }\\n        }\\n    }\\n}\\n  };\\n\\n  set tmpl_map [list %NAME%             $fw_name \\\\\\n                     %IP_PROTOCOL%      $vs__IpProtocol \\\\\\n                     %STATIC_BLACKLIST% $feature_easyL4Firewall_blacklisttmpl \\\\\\n                     %SOURCE_LIST%      $feature_easyL4Firewall_srclist ]\\n\\n  set fw_policy [string map $tmpl_map $fw_tmpl]\\n  debug [list virtual_server l4_firewall tmsh_create] $fw_policy 1\\n  tmsh::create $fw_policy\\n  array set vs_options [list fw_name fw-enforced-policy]\\n}\\n\\n# Process bundled iRules\\nset vs__BundledItems [string map {\\\",\\\" \\\" \\\" \\\";\\\" \\\" \\\"} $vs__BundledItems]\\nset bundled_irules [get_items_starting_with \\\"irule:\\\" $vs__BundledItems]\\ndebug [list virtual_server bundled_irule get_list] [format \\\"%s\\\" $bundled_irules] 7\\n\\nif { [llength $bundled_irules] > 0 } {\\n  set bundled_irule_map [list %APP_PATH%      $app_path \\\\\\n                             %APP_NAME%      $app \\\\\\n                             %VS_NAME%       $vs__Name \\\\\\n                             %POOL_NAME%     $default_pool_name \\\\\\n                             %PARTITION%     $partition ]\\n\\n  foreach bundled_irule $bundled_irules {\\n    debug [list virtual_server bundled_irule create_irule] [format \\\"deploying bundled iRule %s\\\" $bundled_irule] 5\\n\\n    set bundled_irule_curl_mode -1\\n    if { [string match \\\"irule:url=*\\\" $bundled_irule] } {\\n      set bundled_irule_curl_mode 1\\n    } elseif { [string match \\\"irule:urloptional=*\\\" $bundled_irule] } {\\n      set bundled_irule_curl_mode 2\\n    } else {\\n      if {! [info exists bundler_objects($bundled_irule)] } {\\n        error \\\"A bundled iRule named '$bundled_irule' was not found in the template\\\"\\n      }\\n      set bundled_irule_src [string map $bundled_irule_map [::base64::decode $bundler_data($bundled_irule)]]\\n      set bundled_irule [string map {\\\"irule:\\\" \\\"\\\"} $bundled_irule]\\n      set bundled_irule_do_add 1\\n    }\\n\\n    debug [list virtual_server bundled_irule create_irule curl_mode] [format \\\"mode=%s\\\" $bundled_irule_curl_mode] 7\\n    if { $bundled_irule_curl_mode > 0 } {\\n      set bundled_irule_isurl 1\\n      set bundled_irule_url [url_subst $bundled_irule]\\n\\n      regexp {^.*/(.*).irule} $bundled_irule_url -> bundled_irule\\n      set bundled_irule_filename [format \\\"/var/tmp/appsvcs_irule_%s_%s_%s.irule\\\" $::app $bundled_irule $bundler_timestamp]\\n\\n      set bundled_irule_curl_state [curl_save_file $bundled_irule_url $bundled_irule_filename $bundled_irule_curl_mode]\\n      debug [list virtual_server bundled_irule create_irule curl_state] [format \\\"state=%s\\\" $bundled_irule_curl_state] 7\\n\\n      if { $bundled_irule_curl_state } {\\n        set bundled_irule_fh [open $bundled_irule_filename]\\n        set bundled_irule_src [string map $bundled_irule_map [read $bundled_irule_fh]]\\n        close $bundled_irule_fh\\n        set bundled_irule_do_add 1\\n      } else {\\n        set bundled_irule_do_add 0\\n      }\\n      file delete $bundled_irule_filename\\n    }\\n\\n    debug [list virtual_server bundled_irule $bundled_irule do_add] [format \\\"%s\\\" $bundled_irule_do_add] 7\\n    if { $bundled_irule_do_add } {\\n      set bundled_irule_cmd [format \\\"ltm rule %s/%s \\\\{\\\\n%s\\\\n\\\\}\\\" $app_path $bundled_irule $bundled_irule_src]\\n      debug [list virtual_server bundled_irule $bundled_irule tmsh_create] $bundled_irule_cmd 1\\n      tmsh::create $bundled_irule_cmd\\n      if { [string length $vs__Irules] > 0 } {\\n        append vs__Irules \\\",\\\"\\n      }\\n      append vs__Irules [format \\\"%s/%s\\\" $app_path $bundled_irule]\\n    }\\n  }\\n  debug [list virtual_server bundled_irule add_irule_to_vs] [format \\\"vs__Irules=\\\\\\\"%s\\\\\\\"\\\" $vs__Irules] 7\\n}\\n\\n# Process the vs_options array\\nforeach {optionvar optioncmd} [array get vs_options] {\\n  append cmd [generic_add_option [list virtual_server options] [set [subst $optionvar]] $optioncmd \\\"\\\" 0]\\n}\\n\\n# Process the vs_options_custom array\\nforeach {optionvar optioncmd} [array get vs_options_custom] {\\n  append cmd [generic_add_option [list virtual_server options_custom] [set [subst $optionvar]] \\\"\\\" $optioncmd 1]\\n}\\n\\nif { [string length $vs__AdvOptions] > 0 } {\\n  debug [list virtual_server adv_options] \\\"processing advanced options string\\\" 7\\n  append cmd [format \\\" %s\\\" [process_options_string $vs__AdvOptions \\\"\\\" \\\"\\\"]]\\n}\\n\\nset snatcmd \\\"\\\"\\n# Add SNAT options\\nif { [string length $vs__SNATConfig] > 0 } {\\n  switch -glob [string tolower $vs__SNATConfig] {\\n    automap {\\n      append snatcmd \\\" source-address-translation \\\\{ type automap \\\\}\\\"\\n    }\\n    partition-default {\\n      append snatcmd [format \\\" source-address-translation \\\\{ pool /%s/%s type snat \\\\}\\\" $partition $partition]\\n    }\\n    none {\\n      append snatcmd \\\" source-address-translation \\\\{ type none \\\\}\\\"\\n    }\\n    create:* {\\n      # split a string formatted like this: \\\"<ip>[,<ip1>]\\\"\\n\\n      set create_snat_iplist [split [string map {\\\"create:\\\" \\\"\\\"} $vs__SNATConfig] ,]\\n      set create_snat_poolname [format \\\"%s/%s_snatpool\\\" $app_path $app]\\n      set create_snat_poolcmd [format \\\"ltm snatpool %s members replace-all-with { \\\" $create_snat_poolname]\\n      foreach ip $create_snat_iplist {\\n        append create_snat_poolcmd [format \\\" %s%%%s \\\" $ip $rd]\\n      }\\n      append create_snat_poolcmd \\\"} \\\"\\n      debug [list virtual_server snat create_snat_pool tmsh_create] $create_snat_poolcmd 1\\n      tmsh::create $create_snat_poolcmd\\n      append snatcmd [format \\\" source-address-translation \\\\{ pool %s type snat \\\\}\\\" $create_snat_poolname]\\n    }\\n    default {\\n          tmsh::get_config /ltm snatpool $vs__SNATConfig\\n          append snatcmd [format \\\" source-address-translation \\\\{ pool %s type snat \\\\}\\\" $vs__SNATConfig]\\n    }\\n  }\\n  debug [list virtual_server snatcmd] $snatcmd 7\\n}\\nappend cmd $snatcmd\\n\\n# Process feature__insertXForwardedFor\\nif { $feature__insertXForwardedFor eq \\\"enabled\\\"} {\\n  if { [regexp -nocase {^create:} $vs__ProfileHTTP] } {\\n    if { ! [regexp -nocase {insert-xforwarded-for=enabled} $vs__ProfileHTTP] } {\\n      debug [list virtual_server feature__insertXForwardedFor append] \\\"Appending insert-xforwarded-for=enabled to existing HTTP profile customization string\\\" 5\\n      append vs__ProfileHTTP \\\";insert-xforwarded-for=enabled\\\"\\n    } else {\\n      debug [list virtual_server feature__insertXForwardedFor ignore] \\\"insert-xforwarded-for=enabled alredy in HTTP profile customization string... doing nothing\\\" 5\\n    }\\n  } else {\\n    debug [list virtual_server feature__insertXForwardedFor create] [format \\\"Creating HTTP profile customization string \\\\\\\"create:insert-xforwarded-for=enabled;defaults-from=%s\\\\\\\"\\\" $vs__ProfileHTTP] 5\\n    set vs__ProfileHTTP [format \\\"create:insert-xforwarded-for=enabled;defaults-from=%s\\\" $vs__ProfileHTTP]\\n  }\\n}\\n\\n# Process the create: option for profiles in the array below.\\n# Profiles that we support the \\\"create:option[=value][,option2[=value2]]\\\" format for option customization\\narray set profile_create_supported {\\n \\\"vs__ProfileClientProtocol\\\" { append \\\"_clientside\\\" }\\n \\\"vs__ProfileServerProtocol\\\" { append \\\"_serverside\\\"}\\n \\\"vs__ProfileHTTP\\\" { type \\\"http\\\" append \\\"\\\"}\\n \\\"vs__ProfileOneConnect\\\" { type \\\"one-connect\\\" append \\\"\\\"}\\n \\\"vs__ProfileCompression\\\" { type \\\"http-compression\\\" append \\\"\\\"}\\n \\\"vs__ProfileRequestLogging\\\" { type \\\"request-log\\\" append \\\"\\\"}\\n \\\"vs__ProfileServerSSL\\\" { type \\\"server-ssl\\\" append \\\"\\\"}\\n \\\"vs__ProfileClientSSL\\\" { type \\\"client-ssl\\\" append \\\"\\\"}\\n}\\n\\narray set profile_create_defaults {\\n  \\\"tcp\\\" { default \\\"/Common/tcp\\\" }\\n  \\\"udp\\\" { default \\\"/Common/udp\\\" }\\n  \\\"fastl4\\\" { default \\\"/Common/fastL4\\\" }\\n  \\\"fasthttp\\\" { default \\\"/Common/fasthttp\\\" }\\n  \\\"sctp\\\" { default \\\"/Common/sctp\\\" }\\n  \\\"ipother\\\" { default \\\"/Common/ipother\\\" }\\n  \\\"http\\\" { default \\\"/Common/http\\\" }\\n  \\\"one-connect\\\" { default \\\"/Common/oneconnect\\\" }\\n  \\\"http-compression\\\" { default \\\"/Common/httpcompression\\\" }\\n  \\\"request-log\\\" { default \\\"/Common/request-log\\\" }\\n  \\\"server-ssl\\\" { default \\\"/Common/serverssl\\\" }\\n  \\\"client-ssl\\\" { default \\\"/Common/clientssl\\\" }\\n}\\n\\n# Loop through the array\\nforeach {profile_var} [array names profile_create_supported] {\\n  # Setup some base vars\\n  array unset profile_attr\\n  array set profile_attr [subst $::profile_create_supported($profile_var)]\\n  set profile_val [set [subst $profile_var]]\\n  if { [regexp -nocase {^create:} $profile_val] } {\\n    set profile_val [string map {\\\"create:\\\" \\\"\\\"} $profile_val]\\n\\n    # Process the string, check to see the profile type was specified and is valid\\n    array unset profile_options\\n    array unset profile_default_array\\n    array set profile_options [process_kvp_string $profile_val]\\n    if { ! [info exists profile_options(type)] } {\\n      if { [info exists profile_attr(type)] } {\\n        set profile_options(type) $profile_attr(type)\\n      } else {\\n        error \\\"The create string specified for $profile_var needs to include a 'type' option specifying the type of profile to create\\\"\\n      }\\n    }\\n\\n    if { ! [info exists profile_create_defaults($profile_options(type))] } {\\n      error \\\"The profile type '$profile_options(type)' specified for $profile_var is not valid\\\"\\n    }\\n\\n    # Remove the 'type=XXX;' field from the create string\\n    set profile_val [string map [list \\\"type=$profile_options(type);\\\" \\\"\\\"] $profile_val]\\n    set profile_name [format \\\"%s_profile_%s%s\\\" $app $profile_options(type) $profile_attr(append)]\\n    set profile_cmd [format \\\"ltm profile %s %s/%s \\\" $profile_options(type) $app_path $profile_name]\\n    array set profile_default_array [subst $::profile_create_defaults($profile_options(type))]\\n    set profile_default $profile_default_array(default)\\n\\n    # Create the options portion of the TMSH command\\n    set profile_option_cmd [process_options_string $profile_val \\\"profile $profile_options(type)\\\" $profile_default 1]\\n    debug [list virtual_server profiles create_handler $profile_var] [format \\\"%s\\\" $profile_option_cmd] 7\\n\\n    # Build the final TMSH command\\n    append profile_cmd $profile_option_cmd\\n\\n    # Replace the APL var with the new profile name\\n    set [subst $profile_var] [format \\\"%s/%s\\\" $app_path $profile_name]\\n    debug [list virtual_server profiles create_handler $profile_var] [format \\\"%s=%s\\\" $profile_var [set [subst $profile_var]]] 1\\n\\n    # Allow run-time substition of the app name\\n    set profile_cmd [string map [list \\\"%APP_NAME%\\\" $app] $profile_cmd]\\n    debug [list virtual_server profiles create_handler $profile_var tmsh_create] [format \\\"%s\\\" $profile_cmd] 1\\n    tmsh::create $profile_cmd\\n  }\\n}\\n\\n# Add profiles\\nset vsprofiles \\\" profiles replace-all-with  \\\\{ \\\"\\ndebug [list virtual_server profiles] [format \\\"adding base vsprofiles=%s\\\" $vsprofiles] 7\\n\\n# We have to specify context aware profiles first\\n# Figure out the correct context to apply protocol profiles\\nset clientContext \\\"all\\\"\\nset serverContext \\\"all\\\"\\n\\nif { [string length $vs__ProfileClientProtocol] > 0 && [string length $vs__ProfileServerProtocol] > 0 && $vs__ProfileClientProtocol ne $vs__ProfileServerProtocol } {\\n  debug [list virtual_server profiles protocol] \\\"got both client and server protocol profiles\\\" 7\\n  set clientContext \\\"clientside\\\"\\n  set serverContext \\\"serverside\\\"\\n}\\n\\n# Client-side protocol\\nif { [string length $vs__ProfileClientProtocol] > 0 } {\\n  append vsprofiles [format \\\" %s \\\\{ context %s \\\\}\\\" $vs__ProfileClientProtocol $clientContext]\\n  debug [list virtual_server profiles protocol] [format \\\"clientside protocol name=%s context=%s\\\" $vs__ProfileClientProtocol $clientContext] 7\\n}\\n\\n# Server-side protocol\\nif { [string length $vs__ProfileServerProtocol] > 0 && $vs__ProfileClientProtocol ne $vs__ProfileServerProtocol } {\\n  append vsprofiles [format \\\" %s \\\\{ context %s \\\\}\\\" $vs__ProfileServerProtocol $serverContext]\\n  debug [list virtual_server profiles protocol] [format \\\"serverside protocol name=%s context=%s\\\" $vs__ProfileServerProtocol $serverContext] 7\\n}\\n\\n\\n# Set virtual server profiles we support.  The tmsh format expected is:\\n#    profiles replace-all-with { <profile1> [ { context [clientside|serverside|all] } ] <profile2> }\\n# To achieve this while re-using generic_add_option() we simply pass the var name with a blank option string\\n# Profiles that specify a proxy context can be specified in the vs_profiles_contextual array with the value\\n#   specifying the proxy context\\narray set vs_profiles_contextual {\\n   \\\"vs__ProfileConnectivity\\\" \\\"clientside\\\"\\n}\\n\\narray set vs_profiles {\\n \\\"vs__ProfileHTTP\\\" \\\"\\\"\\n \\\"vs__ProfileOneConnect\\\" \\\"\\\"\\n \\\"vs__ProfileCompression\\\" \\\"\\\"\\n \\\"vs__ProfileAnalytics\\\" \\\"\\\"\\n \\\"vs__ProfileRequestLogging\\\" \\\"\\\"\\n \\\"vs__ProfileServerSSL\\\" \\\"\\\"\\n \\\"vs__ProfileSecurityDoS\\\" \\\"\\\"\\n}\\n\\n# Handle the 'use-bundled' value for the VS Access Profile\\n# The bundler code will\\nset bundler_apm_associate 0\\nif { $vs__ProfileAccess eq \\\"use-bundled\\\" } {\\n  set bundler_apm_associate 1\\n} else {\\n  set vs_profiles(vs__ProfileAccess) \\\"\\\"\\n}\\n\\n# Save the base profile string for later use by feature__redirectToHTTPS\\nif { $feature__redirectToHTTPS eq \\\"enabled\\\"} {\\n  set vsprofiles_redirect $vsprofiles\\n}\\n\\n# Client-SSL profile created by iApp\\nif { $clientssl == 1 } {\\n  set vs__ProfileClientSSL [format \\\"%s/%s_clientssl\\\" $app_path $app]\\n  set vs_profiles(vs__ProfileClientSSL) \\\"\\\"\\n  debug [list virtual_server client_ssl associate_created] [format \\\"name=%s\\\" $vs__ProfileClientSSL] 7\\n}\\n\\n# Client-SSL profile specified via vs__ProfileClientSSL\\nif { $clientssl == 2 || $clientssl == 3} {\\n  set vs_profiles(vs__ProfileClientSSL) \\\"\\\"\\n  debug [list virtual_server client_ssl associate_existing] [format \\\"name=%s\\\" $vs__ProfileClientSSL] 7\\n}\\n\\n# Process the vs_profiles_contextual array first to make sure profiles that require a proxy\\n# context are added first\\nforeach {optionvar optioncmd} [array get vs_profiles_contextual] {\\n  append vsprofiles [generic_add_option [list virtual_server options] [set [subst $optionvar]] \\\"\\\" \\\" %s { context $optioncmd } \\\" 0]\\n}\\n\\n# Process the vs_profiles array to build the profiles command\\nforeach {optionvar optioncmd} [array get vs_profiles] {\\n  append vsprofiles [generic_add_option [list virtual_server options] [set [subst $optionvar]] $optioncmd \\\"\\\" 0]\\n}\\n\\nif { [string length $vs__AdvProfiles] > 0 } {\\n  debug [list virtual_server adv_options] \\\"processing advanced profile string\\\" 7\\n  append vsprofiles [format \\\" %s\\\" [generic_add_option [list virtual_server adv_profiles] $vs__AdvProfiles \\\"\\\" \\\"%s\\\" 1]]\\n}\\n\\nappend vsprofiles \\\" \\\\}\\\"\\ndebug [list virtual_server profiles cmd] $vsprofiles 7\\n\\n# Add the profile string to the TMSH command\\nappend cmd $vsprofiles\\n\\n# Process the $vs__AdvPolicies option\\nif { [string length $vs__AdvPolicies] > 0 } {\\n  debug [list virtual_server adv_policies] \\\"processing advanced policies string\\\" 7\\n  # Add the polcies string to the TMSH command\\n  set vspolicies [format \\\" policies replace-all-with \\\\{ %s \\\\} \\\" [generic_add_option [list virtual_server adv_policies] $vs__AdvPolicies \\\"\\\" \\\"%s\\\" 1]]\\n  debug [list virtual_server adv_policies cmd] $vspolicies 7\\n  append cmd $vspolicies\\n}\\n\\n# Create the virtual server\\nset stats_vs 0\\nif { $pool__addr ne \\\"255.255.255.254\\\" } {\\n  debug [list virtual_server tmsh_create] $cmd 1\\n  tmsh::create $cmd\\n  set stats_vs 1\\n\\n  # Process the additional listeners table\\n  set redirect_listeners []\\n  set vs_origcmd $cmd\\n\\n  debug [list virtual_server add_listeners] [format \\\"listenerCount=%s\\\" [llength $vs__Listeners]] 7\\n\\n  set listenerIdx 0\\n  set listenerRedirOverlap 0\\n  foreach listenerRow $vs__Listeners {\\n    debug [list virtual_server add_listeners $listenerIdx] [format \\\"listenerRow=%s\\\" $listenerRow] 9\\n\\n    set listenerMap [list]\\n    array unset listenerColumn\\n    array set listenerColumn {}\\n    table_row_to_array $listenerRow listenerColumn ::table_defaults(Listeners)\\n    debug [list virtual_server add_listeners $listenerIdx table_row_to_array return] [array get listenerColumn] 7\\n\\n    set listenerColumn(Listener) [lindex $listenerColumn(Listener) 0]\\n\\n    if { [string length $listenerColumn(Listener)] == 0 } {\\n      incr listenerIdx\\n      continue\\n    }\\n\\n    set listenerColumn(Destination) [lindex $listenerColumn(Destination) 0]\\n    array unset listenerDestOptions\\n    array set listenerDestOptions [process_kvp_string $listenerColumn(Destination)]\\n    debug [list virtual_server add_listeners $listenerIdx dest_options] [array get listenerDestOptions] 7\\n    regexp {^(.*)[:.]([0-9]{1,5})$} $listenerColumn(Listener) --> listenerColumn(Addr) listenerColumn(Port)\\n\\n    # If this row had the 'redirect' destination specified save it for later and skip this row\\n    if { [info exists listenerDestOptions(redirect)] } {\\n        if { $feature__redirectToHTTPS != \\\"enabled\\\" } {\\n          error \\\"To use the 'redirect' Destination for Listener $listenerColumn(Listener) feature__redirectToHTTPS but be enabled\\\"\\n        }\\n\\n        debug [list virtual_server add_listeners $listenerIdx redirect] $listenerColumn(Listener) 7\\n        lappend redirect_listeners [list $listenerColumn(Listener) [format \\\"%s_%s_redirect_%s\\\" $addl_vs_basename $listenerIdx $listenerColumn(Port)]]\\n        incr listenerIdx\\n        continue\\n    }\\n\\n    # If this row had the 'nossl,noclientssl,noserverssl' destination specified do not attach SSL profiles to the virtual server\\n    if { [info exists listenerDestOptions(nossl)] } {\\n      debug [list virtual_server add_listeners $listenerIdx nossl] $listenerColumn(Listener) 7\\n      lappend listenerMap \\\"\\\\\\\"$vs__ProfileClientSSL\\\\\\\"\\\" \\\"\\\"\\n      lappend listenerMap \\\"\\\\\\\"$vs__ProfileServerSSL\\\\\\\"\\\" \\\"\\\"\\n      set listenerColumn(Destination) [string map [list \\\"\\\\;nossl\\\" \\\"\\\"] $listenerColumn(Destination)]\\n    }\\n    if { [info exists listenerDestOptions(noclientssl)] } {\\n      debug [list virtual_server add_listeners $listenerIdx noclientssl] $listenerColumn(Listener) 7\\n      lappend listenerMap \\\"\\\\\\\"$vs__ProfileClientSSL\\\\\\\"\\\" \\\"\\\"\\n      set listenerColumn(Destination) [string map [list \\\"\\\\;noclientssl\\\" \\\"\\\"] $listenerColumn(Destination)]\\n    }\\n    if { [info exists listenerDestOptions(noserverssl)] } {\\n      debug [list virtual_server add_listeners $listenerIdx noserverssl] $listenerColumn(Listener) 7\\n      lappend listenerMap \\\"\\\\\\\"$vs__ProfileServerSSL\\\\\\\"\\\" \\\"\\\"\\n      set listenerColumn(Destination) [string map [list \\\"\\\\;noserverssl\\\" \\\"\\\"] $listenerColumn(Destination)]\\n    }\\n\\n    if { $listenerColumn(Destination) eq \\\"\\\" || [string tolower $listenerColumn(Destination)] eq \\\"default\\\"} {\\n      set listenerColumn(Pool) $default_pool_name\\n    } elseif { [string first \\\"/\\\" $listenerColumn(Destination)] >= 0 } {\\n      set listenerColumn(Pool) $listenerColumn(Destination)\\n    } else {\\n      if { ![info exist poolNames($listenerColumn(Destination))] } {\\n        error \\\"The listener $listenerColumn(Listener) referenced a destination pool index $listenerColumn(Destination) which does not exist\\\"\\n      }\\n      set listenerColumn(Pool) $poolNames($listenerColumn(Destination))\\n    }\\n\\n    # Setup our new tmsh command string\\n    set listenerColumn(Name) [format \\\"%s_%s_%s\\\" $addl_vs_basename $listenerIdx $listenerColumn(Port)]\\n    set listenerColumn(Dest) [get_dest_str $listenerColumn(Addr) $listenerColumn(Port)]\\n\\n    # Check to see if there is a potential overlap with the feature__redirectToHTTPS functionality\\n    if { $listenerColumn(Dest) eq [format \\\"%s:80\\\" $vs_dest_addr] } {\\n      set listenerRedirOverlap 1\\n    }\\n\\n    debug [list virtual_server add_listeners $listenerIdx] [format \\\"name=%s addr=%s port=%s dest=%s\\\" $listenerColumn(Name) $listenerColumn(Addr) $listenerColumn(Port) $listenerColumn(Dest)] 7\\n    set vs_listener_cmd [string map [list $vs__Name $listenerColumn(Name) \\\"$vs_dest_addr:$pool__port\\\" $listenerColumn(Dest) $default_pool_name $listenerColumn(Pool)] $vs_origcmd]\\n    # If our listener address is IPv6 we need to fixup the VS source filter and destination mask\\n    if { [is_ipv6 $listenerColumn(Addr)] } {\\n      set vs_listener_cmd [string map [list $vs__SourceAddress [format \\\"::%%%s/0\\\" $rd]] $vs_listener_cmd]\\n      set vs_listener_cmd [string map [list $pool__mask [format \\\"ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff\\\" $pool__mask]] $vs_listener_cmd]\\n    }\\n\\n    set vs_listener_cmd [string map $listenerMap $vs_listener_cmd]\\n\\n    debug [list virtual_server add_listeners $listenerIdx tmsh_create] $vs_listener_cmd 1\\n    tmsh::create $vs_listener_cmd\\n    incr listenerIdx\\n  }\\n\\n  if { !$listenerRedirOverlap } {\\n    # Add a listener for the default virtual server redirect\\n    lappend redirect_listeners [list [format \\\"%s:80\\\" $vs_dest_addr] [format \\\"%s_default_vs_redirect_80\\\" $app]]\\n  }\\n} else {\\n  debug [list virtual_server skip_create] \\\"found 255.255.255.254 as pool__addr, skipping creation\\\" 2\\n}\\n\\n# Call the custom_extensions_after_vs proc to allow site-specific customizations\\ncustom_extensions_after_vs\\n\\n# Create an additional virtual server on port 80 for feature__redirectToHTTPS\\nif { $feature__redirectToHTTPS eq \\\"enabled\\\" && $pool__addr ne \\\"255.255.255.254\\\" } {\\n  set redirect_listener_idx 0\\n  debug [list virtual_server feature__redirectToHTTPS redirect_listeners] $redirect_listeners 7\\n  foreach redirect_listener_list $redirect_listeners {\\n    set redirect_listener [lindex $redirect_listener_list 0]\\n    set redirect_listener_name [lindex $redirect_listener_list 1]\\n    debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx] [format \\\"dest=%s name=%s\\\" $redirect_listener $redirect_listener_name] 5\\n\\n    regexp {^(.*)[:.]([0-9]{1,5})$} $redirect_listener --> redirect_listener_addr redirect_listener_port\\n\\n    set redirect_listener_dest [get_dest_str $redirect_listener_addr $redirect_listener_port]\\n    debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx] [format \\\"creating redirect virtual server on %s\\\" $redirect_listener_dest] 5\\n\\n    array set redirect_listener_options {\\n     \\\"redirect_listener_mask\\\" \\\"mask\\\"\\n     \\\"redirect_listener_src\\\" \\\"source\\\"\\n     \\\"vs__IpProtocol\\\" \\\"ip-protocol\\\"\\n    }\\n\\n    if { $feature__easyL4Firewall == \\\"enabled\\\" } {\\n      set redirect_listener_options(fw_name) \\\"fw-enforced-policy\\\"\\n      debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx fw_check] [format \\\"feature__easyL4Firewall is enabled, using %s\\\" $redirect_listener_options(fw_name)] 5\\n    }\\n\\n    if { [is_ipv6 $redirect_listener_addr] } {\\n      set redirect_listener_src [format \\\"::0.0.0.0%%%s/0\\\" $rd]\\n      set redirect_listener_mask \\\"ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff\\\"\\n    } else {\\n      set redirect_listener_src $vs__SourceAddress\\n      set redirect_listener_mask \\\"255.255.255.255\\\"\\n    }\\n\\n    set redirect_listener_cmd [format \\\"ltm virtual %s/%s destination %s \\\" $app_path $redirect_listener_name $redirect_listener_dest]\\n\\n    # Process the vs_options array\\n    foreach {optionvar optioncmd} [array get redirect_listener_options] {\\n      append redirect_listener_cmd [generic_add_option [list virtual_server feature__redirectToHTTPS $redirect_listener_idx options] [set [subst $optionvar]] $optioncmd \\\"\\\" 0]\\n    }\\n\\n    # The HSTS spec recommends that when redirected a 301 Redirect is used, rather than a 302 like _sys_https_redirect uses\\n    if { [string match \\\"enabled*\\\" $feature__securityEnableHSTS] } {\\n      debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx hsts_check] [format \\\"feature__securityEnableHSTS is enabled, using %s\\\" $hstsredirectrule] 5\\n      append redirect_listener_cmd \\\" rules { $hstsredirectrule } \\\"\\n    } else {\\n      append redirect_listener_cmd \\\" rules { /Common/_sys_https_redirect } \\\"\\n    }\\n\\n    append redirect_listener_cmd $vsprofiles_redirect\\n    append redirect_listener_cmd [generic_add_option [list virtual_server feature__redirectToHTTPS $redirect_listener_idx options] $vs__ProfileHTTP \\\"\\\" \\\"\\\" 0]\\n    append redirect_listener_cmd \\\" \\\\}\\\"\\n    debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx tmsh_create] $redirect_listener_cmd 1\\n    tmsh::create $redirect_listener_cmd\\n    incr redirect_listener_idx\\n  }\\n}\\n\\n# Create iCall statistics publisher\\n# CAVEATS: This is mode specific because $app_stats is not set unless deployment\\n# is driven by iWorkflow.  To accomodate all use cases we make this mode specific:\\n# mode=1 (Standalone) : Look at $iapp__appStats from the presentation layer to control creation\\n# mode=2 (iWorkflow): Look at $app_stats set by iWorkflow to control creation\\n# mode=3 (APIC)       : Look at $app_stats set by iWorkflow to control creation\\ndebug [list stats] [format \\\"mode=%s app_stats=%s iapp__appStats=%s\\\" $mode $app_stats $iapp__appStats] 7\\nif { (($mode == 2 || $mode == 3 || $mode == 4) && $app_stats eq \\\"enabled\\\") || ($mode == 1 && $iapp__appStats eq \\\"enabled\\\") } {\\n  # Create the iCall stats publisher\\n  debug [list stats] \\\"creating icall stats publisher\\\" 7\\n      # START EMBEDDED ICALL SCRIPT\\n  set icall_script_tmpl {\\n# Copyright (c) 2017 F5 Networks, Inc.\\n#\\n# Licensed under the Apache License, Version 2.0 (the \\\"License\\\");\\n# you may not use this file except in compliance with the License.\\n# You may obtain a copy of the License at\\n#\\n#     http://www.apache.org/licenses/LICENSE-2.0\\n#\\n#     Unless required by applicable law or agreed to in writing, software\\n#     distributed under the License is distributed on an \\\"AS IS\\\" BASIS,\\n#     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\\n#     See the License for the specific language governing permissions and\\n#     limitations under the License.\\n#\\nset app %APP_NAME%\\nset partition %PARTITION%\\nset aso \\\"sys.application.service /$partition/${app}.app/$app\\\"\\n\\nset enabled_stats {}\\n\\nset pool_enabled %POOL_ENABLED%\\nset vs_enabled %VS_ENABLED%\\nset http_enabled %HTTP_ENABLED%\\nset ssl_enabled %SSL_ENABLED%\\n\\nif { $pool_enabled } { lappend enabled_stats \\\"pool\\\" }\\nif { $vs_enabled } { lappend enabled_stats \\\"virtual\\\" }\\nif { $http_enabled } { lappend enabled_stats \\\"http\\\" }\\nif { $ssl_enabled } { lappend enabled_stats \\\"ssl\\\" }\\n\\nset virtual_path    \\\"ltm virtual /$partition/${app}.app/%VS_NAME%\\\"\\nset http_path       \\\"ltm profile http %HTTP_PROFILE%\\\"\\nset ssl_path        \\\"ltm profile client-ssl %SSL_PROFILE%\\\"\\nset pool_path       \\\"ltm pool /$partition/${app}.app/%POOL_NAME%\\\"\\n\\n#puts \\\"app=$app\\\"\\n#puts \\\"partition=$partition\\\"\\n#puts \\\"aso=$aso\\\"\\n#puts \\\"virtual_path=$virtual_path\\\"\\n#puts \\\"http_path=$http_path\\\"\\n#puts \\\"pool_path=$pool_path\\\"\\n\\n# these lists represent strings taken from \\\"show ... field-fmt\\\"\\nset http_stats {\\n  get-reqs number-reqs post-reqs resp-2xx-cnt resp-3xx-cnt resp-4xx-cnt\\n  resp-5xx-cnt resp-bucket-1k resp-bucket-2m resp-bucket-4k resp-bucket-16k\\n  resp-bucket-32k resp-bucket-64k resp-bucket-128k resp-bucket-512k\\n  resp-bucket-large\\n}\\nset ssl_stats {\\n  common.cipher-uses.adh-keyxchg common.cipher-uses.aes-bulk common.cipher-uses.aes-gcm-bulk\\n  common.cipher-uses.des-bulk common.cipher-uses.dh-rsa-keyxchg common.cipher-uses.dhe-dss-keyxchg\\n  common.cipher-uses.ecdh-ecdsa-keyxchg common.cipher-uses.ecdh-rsa-keyxchg\\n  common.cipher-uses.ecdhe-ecdsa-keyxchg common.cipher-uses.ecdhe-rsa-keyxchg\\n  common.cipher-uses.edh-rsa-keyxchg common.cipher-uses.idea-bulk common.cipher-uses.md5-digest\\n  common.cipher-uses.null-bulk common.cipher-uses.null-digest common.cipher-uses.rc2-bulk\\n  common.cipher-uses.rc4-bulk common.cipher-uses.rsa-keyxchg common.cipher-uses.sha-digest\\n  common.cur-compat-conns common.cur-conns common.cur-native-conns common.decrypted-bytes-in\\n  common.decrypted-bytes-out common.encrypted-bytes-in common.encrypted-bytes-out\\n  common.fatal-alerts common.fully-hw-accelerated-conns common.handshake-failures\\n  common.insecure-handshake-accepts common.insecure-handshake-rejects common.insecure-renegotiation-rejects\\n  common.max-compat-conns common.max-conns common.max-native-conns\\n  common.non-hw-accelerated-conns common.partially-hw-accelerated-conns\\n  common.protocol-uses.dtlsv1 common.protocol-uses.sslv2 common.protocol-uses.sslv3\\n  common.protocol-uses.tlsv1 common.protocol-uses.tlsv1-1 common.protocol-uses.tlsv1-2\\n  common.secure-handshakes common.tot-compat-conns common.tot-native-conns\\n}\\nset virtual_stats {\\n    clientside.bits-in clientside.bits-out clientside.cur-conns\\n    clientside.max-conns clientside.pkts-in clientside.pkts-out\\n    clientside.tot-conns status.availability-state status.enabled-state\\n    status.status-reason\\n}\\nset pool_stats {\\n    active-member-cnt serverside.bits-in serverside.bits-out\\n    serverside.cur-conns serverside.max-conns serverside.pkts-in\\n    serverside.pkts-out serverside.tot-conns\\n}\\n\\n# loop over each type of object we want to look at, building the name\\n# of the path and the stats for it as needed\\nforeach type $enabled_stats {\\n    # making this its own variable made the Tcl validator stop throwing\\n    # a warning - though it _should_ be fine to move it inline w/its use\\n    set path [set ${type}_path]\\n    set objs [tmsh::get_status $path raw]\\n    if { [llength $objs] == 0 } {\\n        puts \\\"no object found for: $type\\\"\\n        continue\\n    }\\n    set obj [lindex $objs 0]\\n    #puts \\\"obj=$obj\\\"\\n    foreach stat [set ${type}_stats] {\\n        #puts \\\" stat=$stat\\\"\\n        set value [tmsh::get_field_value $obj $stat]\\n        #puts \\\" aso=$aso type=$type stat=$stat value=$value\\\"\\n        # associate the iStat with the app service\\n        istats::set \\\"$aso string $stat\\\" $value\\n    }\\n}\\n\\n# Set an additional iStat for the size of the pool, as this is not\\n# stored as a stat but is nice to have when looking at pool health.\\n# Do that here each run through rather than in the iApp because if\\n# an external pool is used or strictness was off the size of the\\n# pool can change and the iApp wouldn't run to adjust the size\\nif { $pool_enabled } {\\n  set pools [tmsh::get_config $pool_path]\\n  set numpools [llength $pools]\\n  set pool_size 0\\n  #puts \\\"numpools=$numpools pool_size=$pool_size\\\"\\n  if { $numpools == 1 } {\\n    # safe to assume only obj in list is our pool now. grab its size\\n    # and move along\\n    set pool [lindex $pools 0]\\n    set fdx 0\\n    set fields [tmsh::get_field_names nested $pool]\\n    set field_count [llength $fields]\\n    while { $fdx < $field_count } {\\n      set field [lindex $fields $fdx]\\n      #puts \\\"field=$field\\\"\\n      incr fdx\\n      if { $field eq \\\"members\\\"} {\\n        set pool_size [llength [tmsh::get_field_value $pool members]]\\n        #puts \\\"new pool_size=$pool_size\\\"\\n      }\\n    }\\n  }\\n  istats::set \\\"$aso string total-member-cnt\\\" $pool_size\\n}\\n#set tmc [istats::get $aso total-member-cnt]\\n#puts \\\"tmc=$tmc\\\"\\n  }; # END EMBEDDED ICALL SCRIPT\\n\\n  set stats_pool 0\\n  if { $poolCount > 0 && $default_pool_name ne \\\"\\\" } {\\n    set stats_pool 1\\n  }\\n\\n  if { [expr {$feature__statsHTTP eq \\\"enabled\\\" || $feature__statsHTTP eq \\\"auto\\\"}] && [string length $vs__ProfileHTTP] > 0 } {\\n    debug [list stats feature_statsHTTP] \\\"enabling HTTP stats\\\" 7\\n    set feature__statsHTTP 1\\n  } else {\\n    set feature__statsHTTP 0\\n  }\\n\\n  if { [expr {$feature__statsTLS eq \\\"enabled\\\" || $feature__statsTLS eq \\\"auto\\\"}] && [string length $vs__ProfileClientSSL] > 0 } {\\n    debug [list stats feature_statsTLS] \\\"enabling TLS stats\\\" 7\\n    set feature__statsTLS 1\\n  } else {\\n    set feature__statsTLS 0\\n  }\\n\\n  # used to fill in variables within iCall script\\n  set script_map [list %APP_NAME%      $app \\\\\\n                       %VS_NAME%       $vs__Name \\\\\\n                       %POOL_NAME%     $default_pool_name \\\\\\n                       %PARTITION%     $partition \\\\\\n                       %POOL_ENABLED%  $stats_pool \\\\\\n                       %VS_ENABLED%    $stats_vs \\\\\\n                       %HTTP_ENABLED%  $feature__statsHTTP \\\\\\n                       %HTTP_PROFILE%  [format \\\"%s\\\" $vs__ProfileHTTP] \\\\\\n                       %SSL_ENABLED%   $feature__statsTLS \\\\\\n                       %SSL_PROFILE%   [format \\\"%s\\\" $vs__ProfileClientSSL] ]\\n\\n  set icall_script_src [string map $script_map $icall_script_tmpl]\\n  debug [list stats icall_src] $icall_script_src 10\\n\\n  debug [list stats icall_script tmsh_create] \\\"publish_stats script\\\" 1\\n  tmsh::create sys icall script publish_stats definition \\\\{ $icall_script_src \\\\}\\n  debug [list stats icall_handler tmsh_create] \\\"iCall handler\\\" 1\\n  tmsh::create sys icall handler periodic publish_stats interval 60 script publish_stats\\n}\\n\\n# Process deferred deployment bundled ASM policies\\nset bundler_asm_policies [get_items_starting_with \\\"asm:\\\" $vs__BundledItems]\\nset bundler_apm_policies [get_items_starting_with \\\"apm:\\\" $vs__BundledItems]\\nset bundler_asm_deploy []\\nset bundler_apm_deploy []\\nset bundler_all_deploy 0\\nset postdeploy_final_state 1\\n\\n# First perform all our checks\\nif { [llength $bundler_asm_policies] > 0 } {\\n  if { ![is_provisioned asm]} {\\n    error \\\"A bundled ASM policy was selected, however, the ASM module is not provisioned on this device\\\"\\n  }\\n\\n  if { [string length $vs__ProfileHTTP] == 0 } {\\n    error \\\"A HTTP Profile is required to use ASM functionality\\\"\\n  }\\n}\\n\\nif { [llength $bundler_apm_policies] > 1 } {\\n  error \\\"Only one bundled APM policy may be selected for deployment\\\"\\n}\\n\\nif { [llength $bundler_apm_policies] == 1 } {\\n  if { ![is_provisioned apm]} {\\n    error \\\"A bundled APM policy was selected, however, the APM module is not provisioned on this device\\\"\\n  }\\n  if { [string length $vs__ProfileHTTP] == 0 } {\\n    error \\\"A HTTP Profile is required to use APM functionality\\\"\\n  }\\n}\\n\\n# Process deferred deployment bundled ASM policies\\nset bundler_asm_mode 0\\nif { [llength $bundler_asm_policies] > 0 } {\\n  foreach bundled_asm $bundler_asm_policies {\\n    set bundled_asm_isurl 0\\n    if { [string match \\\"asm:url=*\\\" $bundled_asm] } {\\n      set bundled_asm_isurl 1\\n      set bundled_asm_url [url_subst $bundled_asm]\\n      regexp {^.*/(.*).xml} $bundled_asm_url -> bundled_asm_stripped\\n      set bundled_asm_filename [format \\\"/var/tmp/appsvcs_asm_%s_%s_%s.xml\\\" $::app $bundled_asm_stripped $bundler_timestamp]\\n    } else {\\n      set bundled_asm_stripped [string map {\\\"asm:\\\" \\\"\\\"} $bundled_asm]\\n      set bundled_asm_filename [format \\\"/var/tmp/appsvcs_asm_%s_%s_%s.xml\\\" $::app $bundled_asm_stripped $bundler_timestamp]\\n    }\\n\\n    debug [list bundler asm check_preserve] [format \\\"%s %s\\\" $bundled_asm [string match *$bundled_asm* [get_items_starting_with \\\"asm:\\\" [get_var vs__BundledItems]]]] 7\\n    if { $newdeploy || \\\\\\n         [expr { $redeploy && [string match redeploy* $iapp__asmDeployMode]}] || \\\\\\n         [expr { $redeploy && [string match *$bundled_asm* [get_items_starting_with \\\"asm:\\\" [get_var vs__BundledItems]]]}] == 0 } {\\n      debug [list bundler asm deploy] $bundled_asm 5\\n      set bundler_asm_mode 1\\n\\n      if { $bundled_asm_isurl } {\\n        curl_save_file $bundled_asm_url $bundled_asm_filename\\n      } else {\\n        if {! [info exists bundler_objects($bundled_asm)] } {\\n          error \\\"A bundled ASM policy named '$bundled_asm' was not found in the template\\\"\\n        }\\n\\n        set outfile [open $bundled_asm_filename w]\\n        puts -nonewline $outfile [::base64::decode $bundler_data($bundled_asm)]\\n        close $outfile\\n      }\\n    } else {\\n      set bundler_asm_mode 2\\n      set savecmd [format \\\"asm policy %s/%s min-xml-file %s\\\" $app_path $bundled_asm_stripped $bundled_asm_filename]\\n      debug [list bundler asm preserve] [format \\\"preserving existing policy... save to %s\\\" $bundled_asm_filename] 5\\n      debug [list bundler asm preserve tmsh_save] $savecmd 1\\n      tmsh::save $savecmd\\n    }\\n    lappend bundler_asm_deploy $bundled_asm_stripped\\n    incr bundler_all_deploy\\n  }\\n}\\n\\n# Process deferred deployment bundled APM policies\\nset bundler_apm_mode 0\\n\\nif { [llength $bundler_apm_policies] == 1 } {\\n  set bundled_apm [lindex $bundler_apm_policies 0]\\n\\n  set bundled_apm_isurl 0\\n  if { [string match \\\"apm:url=*\\\" $bundled_apm] } {\\n    set bundled_apm_isurl 1\\n    set bundled_apm_url [url_subst $bundled_apm]\\n    regexp {^.*/(.*).tar.gz} $bundled_apm_url -> bundled_apm_stripped\\n    set bundled_apm_filename [format \\\"/var/tmp/appsvcs_apm_%s_%s_%s.tar.gz\\\" $::app $bundled_apm_stripped $bundler_timestamp]\\n  } else {\\n    set bundled_apm_stripped [string map {\\\"apm:\\\" \\\"\\\"} $bundled_apm]\\n    set bundled_apm_filename [format \\\"/var/tmp/appsvcs_apm_%s_%s_%s.tar.gz\\\" $::app $bundled_apm_stripped $bundler_timestamp]\\n  }\\n\\n  debug [list bundler apm check_preserve] [format \\\"%s %s\\\" $bundled_apm [string match *$bundled_apm* [get_items_starting_with \\\"apm:\\\" [get_var vs__BundledItems]]]] 7\\n  if { $newdeploy || \\\\\\n       [expr { $redeploy && [string match redeploy* $iapp__apmDeployMode]}] || \\\\\\n       [expr { $redeploy && [llength [get_items_starting_with \\\"apm:\\\" [get_var vs__BundledItems]]]}] == 0 } {\\n    debug [list bundler apm deploy] $bundled_apm 5\\n    set bundler_apm_mode 1\\n\\n    if { $bundled_apm_isurl } {\\n      curl_save_file $bundled_apm_url $bundled_apm_filename\\n    } else {\\n      if {! [info exists bundler_objects($bundled_apm)] } {\\n        error \\\"A bundled APM policy named '$bundled_apm' was not found in the template\\\"\\n      }\\n\\n      debug [list bundler apm deploy version_check] [format \\\"bundled_version=%s system_version=%s\\\" $bundler_objects($bundled_apm) $version_info(version)] 7\\n      if {! [string match $bundler_objects($bundled_apm)* $version_info(version)] } {\\n        error \\\"The bundled APM policy '$bundled_apm' requires BIG-IP version $bundler_objects($bundled_apm).  This system is running version $version_info(version)\\\"\\n      }\\n\\n      set outfile [open $bundled_apm_filename w]\\n      fconfigure $outfile -translation binary\\n      puts -nonewline $outfile [::base64::decode $bundler_data($bundled_apm)]\\n      close $outfile\\n    }\\n  } else {\\n    debug [list bundler apm preserve] $bundled_apm 5\\n    set bundler_apm_mode 2\\n    set bundled_apm_export_filename [format \\\"appsvcs_apm_%s_%s_%s\\\" $::app $bundled_apm_stripped $bundler_timestamp]\\n    switch -glob $version_info(version) {\\n      11.5* {\\n        #ng_export <access_profile_name> <filename> [<partition>] FIXTHIS\\n        set bundler_apm_exportcmd [format \\\"/usr/bin/env REMOTEUSER=admin USER=admin /usr/bin/ng_export %s.app/bundled_apm_policy %s %s\\\" $app $bundled_apm_export_filename $partition]\\n        set bundler_apm_renamecmd [format \\\"mv /tmp/%s.conf.tar.gz %s\\\" $bundled_apm_export_filename $bundled_apm_filename]\\n      }\\n      11.6* {\\n        set bundler_apm_exportcmd [format \\\"/usr/bin/env REMOTEUSER=admin USER=admin /usr/bin/ng_export %s.app/bundled_apm_policy %s -p %s\\\" $app $bundled_apm_export_filename $partition]\\n        set bundler_apm_renamecmd [format \\\"mv /tmp/profile-%s.conf.tar.gz %s\\\" $bundled_apm_export_filename $bundled_apm_filename]\\n      }\\n      12.* {\\n        set bundler_apm_exportcmd [format \\\"/usr/bin/env REMOTEUSER=admin USER=admin /usr/bin/ng_export %s.app/bundled_apm_policy %s -p %s\\\" $app $bundled_apm_export_filename $partition]\\n        set bundler_apm_renamecmd [format \\\"mv /tmp/profile-%s.conf.tar.gz %s\\\" $bundled_apm_export_filename $bundled_apm_filename]\\n      }\\n      default { error \\\"The TMOS version running on this device does not support the preserve APM deployment modes\\\" }\\n    }\\n    debug [list bundler apm preserve] [format \\\"preserving existing policy... save to %s\\\" $bundled_apm_filename] 5\\n    debug [list bundler apm preserve export_cmd] $bundler_apm_exportcmd 1\\n    debug [list bundler apm preserve rename_cmd] $bundler_apm_renamecmd 1\\n    eval exec $bundler_apm_exportcmd\\n    eval exec $bundler_apm_renamecmd\\n\\n  }\\n  lappend bundler_apm_deploy $bundled_apm_stripped\\n  incr bundler_all_deploy\\n}\\n\\nif { $bundler_all_deploy } {\\n  set postdeploy_final_state 0\\n  set bundler_enablevs 0\\n  if { [string match *\\\\-block $iapp__asmDeployMode] || [string match *\\\\-block $iapp__apmDeployMode] } {\\n    set bundler_vs_cmd [format \\\"ltm virtual %s/%s disabled\\\" $app_path $vs__Name]\\n    debug [list bundler check_deploy_mode] \\\"iapp__(asm|apm)DeployMode specified block mode, disabling virtual server\\\" 5\\n    debug [list bundler check_deploy_mode tmsh_modify] $bundler_vs_cmd 1\\n    tmsh::modify $bundler_vs_cmd\\n    set bundler_enablevs 1\\n  }\\n\\n  set bundler_icall_tmpl {\\nsys icall script %APP_PATH%/postdeploy_bundler {\\n    app-service %APP_PATH%/%APP_NAME%\\n    definition {\\nset app %APP_NAME%\\nset app_path %APP_PATH%\\nset partition %PARTITION%\\nset vs_name %VS_NAME%\\nset enable_vs %ENABLEVS%\\nset asm_policy_list [list %ASMPOLICYLIST%]\\nset apm_policy_list [list %APMPOLICYLIST%]\\nset all_policy_list [list %ASMPOLICYLIST% %APMPOLICYLIST%]\\nset timestamp %TIMESTAMP%\\nset apm_import_cmd [list %APMIMPORTCMD%]\\nset newdeploy %NEWDEPLOY%\\nset redeploy %REDEPLOY%\\nset apm_associate %APMASSOCIATE%\\nset asm_mode %ASMMODE%\\nset apm_mode %APMMODE%\\nset strict_updates %STRICTUPDATES%\\n\\nset aso \\\"/$partition/${app}.app/$app\\\"\\nset iaso [format \\\"sys.application.service %s\\\" $aso]\\nset logprefix \\\"\\\\[appsvcs_postdeploy_bundler\\\\]\\\\[$app\\\\]\\\"\\n\\nset systemTime [clock seconds]\\nputs \\\"$logprefix Starting at [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S]\\\"\\n\\nset file_found 0\\nforeach policy $asm_policy_list {\\n\\tset policy_filename [format \\\"/var/tmp/appsvcs_asm_%s_%s_%s.xml\\\" $app $policy $timestamp]\\n\\tputs \\\"$logprefix Looking for file '$policy_filename'...\\\"\\n\\tif { [file exists $policy_filename] } {\\n\\t\\tputs \\\"$logprefix  Found file matching policy '$policy' at '$policy_filename'\\\"\\n\\t\\tincr file_found\\n\\t}\\n}\\n\\nforeach policy $apm_policy_list {\\n\\tset policy_filename [format \\\"/var/tmp/appsvcs_apm_%s_%s_%s.tar.gz\\\" $app $policy $timestamp]\\n\\n\\tputs \\\"$logprefix Looking for file '$policy_filename'...\\\"\\n\\tif { [file exists $policy_filename] } {\\n\\t\\tputs \\\"$logprefix Found file matching policy '$policy' at '$policy_filename'\\\"\\n\\t\\tincr file_found\\n\\t}\\n}\\n\\nputs \\\"$logprefix [llength $all_policy_list] policies selected for deployment, $file_found policy files found\\\"\\n\\nif { $file_found != [llength $all_policy_list] } {\\n\\t\\tputs \\\"$logprefix All policy files were not found, exiting (this is normal on the secondary device)\\\"\\n\\t\\texit 0\\n}\\n\\ntmsh::cd $app_path\\nputs \\\"$logprefix Setting iCall handler to inactive...\\\"\\ntmsh::modify sys application service $aso strict-updates disabled\\ntmsh::modify sys icall handler periodic postdeploy_bundler status inactive\\n\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"ASM_IN_PROGRESS\\\"\\nforeach policy $asm_policy_list {\\n\\tistats::set [format \\\"%s string deploy.postdeploy_bundler.asm.%s\\\" $iaso $policy] \\\"DEPLOY_IN_PROGRESS\\\"\\n\\tset policy_filename [format \\\"/var/tmp/appsvcs_asm_%s_%s_%s.xml\\\" $app $policy $timestamp]\\n\\tputs \\\"$logprefix Loading ASM policy from $policy_filename to ASO $aso...\\\"\\n\\ttmsh::load asm policy $policy file $policy_filename overwrite\\n\\ttmsh::modify asm policy $policy app-service $aso\\n\\n\\tputs \\\"$logprefix  Setting ASM policy $app_path/$policy active...\\\"\\n\\ttmsh::modify asm policy $policy active\\n\\n\\tputs \\\"$logprefix  Deleting file $policy_filename...\\\"\\n\\tfile delete $policy_filename\\n\\tistats::set [format \\\"%s string deploy.postdeploy_bundler.asm.%s\\\" $iaso $policy] \\\"DEPLOY_COMPLETE\\\"\\n\\n}\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"ASM_COMPLETE\\\"\\n\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"APM_IN_PROGRESS\\\"\\nset apm_apply 0\\nforeach policy $apm_policy_list {\\n\\tistats::set [format \\\"%s string deploy.postdeploy_bundler.apm.%s\\\" $iaso $policy] \\\"DEPLOY_IN_PROGRESS\\\"\\n\\tset policy_filename [format \\\"/var/tmp/appsvcs_apm_%s_%s_%s.tar.gz\\\" $app $policy $timestamp]\\n\\n\\tif { $redeploy && $apm_mode == 2 } {\\n\\t\\tcatch { tmsh::modify [format \\\"ltm virtual %s/%s profiles delete \\\\{ %s/bundled_apm_policy \\\\{ \\\\} \\\\}\\\" $app_path $vs_name $app_path]\\n\\t\\t\\t\\ttmsh::delete apm profile access bundled_apm_policy\\n\\t\\t\\t\\ttmsh::delete apm policy access-policy bundled_apm_policy }\\n\\t}\\n\\n\\tputs \\\"$logprefix Loading APM policy from $policy_filename to ASO $aso...\\\"\\n\\teval exec $apm_import_cmd 2>&1\\n\\n\\t# Iterate through all the create APM objects and set the ASO\\n\\tforeach {apm_obj} [tmsh::get_config /apm] {\\n\\t\\tset apm_objname [lrange $apm_obj 0 end-1]\\n\\t\\ttmsh::modify [format \\\"%s app-service %s\\\" $apm_objname $aso]\\n\\t}\\n\\n\\tputs \\\"$logprefix  Applying APM policy $app_path/bundled_apm_policy...\\\"\\n\\t# We need to sleep outside of scriptd to allow TMM to commit the APM config\\n\\t# Credit to F5 iApp team/CTX VDI iApp for finding this\\n    set fn [format \\\"/var/tmp/appsvcs_apmapply_%s.sh\\\" $app]\\n    catch {\\n        set fh [open $fn w]\\n        puts $fh \\\"sleep 5\\\"\\n        puts $fh [format \\\"tmsh modify apm profile access %s/bundled_apm_policy generation-action increment\\\" $app_path]\\n        if { $enable_vs } {\\n        \\tset apm_apply 1\\n\\t\\t\\tputs \\\"$logprefix   Re-enabling Virtual Server after apply operation completes (block modifier was specified in deployment mode)\\\"\\n        \\tputs $fh [format \\\"tmsh modify ltm virtual %s/%s enabled\\\" $app_path $vs_name]\\n        }\\n        close $fh\\n        exec chmod 777 $fn\\n        exec $fn &\\n    } {}\\n\\n\\tif { $apm_associate } {\\n\\t\\tputs \\\"$logprefix  Associating APM policy with VS (use-bundled value specified for vs__ProfileAccess)\\\"\\n\\t\\ttmsh::modify [format \\\"ltm virtual %s/%s profiles add \\\\{ %s/bundled_apm_policy \\\\{ \\\\} \\\\}\\\" $app_path $vs_name $app_path]\\n\\t}\\n\\n\\tputs \\\"$logprefix  Deleting file $policy_filename...\\\"\\n\\tfile delete $policy_filename\\n\\tistats::set [format \\\"%s string deploy.postdeploy_bundler.apm.%s\\\" $iaso $policy] \\\"DEPLOY_COMPLETE\\\"\\n}\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"APM_COMPLETE\\\"\\n\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"DEFERRED_CMDS_IN_PROGRESS\\\"\\n%DEFERREDCMDS%\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"DEFERRED_CMDS_COMPLETE\\\"\\n\\nputs \\\"$logprefix Bundled policy deployment completed\\\"\\n\\nif { $enable_vs && ! $apm_apply} {\\n\\tputs \\\"$logprefix Re-enabling Virtual Server (block modifier was specified in deployment mode)\\\"\\n\\ttmsh::modify [format \\\"ltm virtual %s/%s enabled\\\" $app_path $vs_name]\\n}\\n\\n# puts \\\"$logprefix Delaying to ensure completion...\\\"\\n# after 10000\\n\\nset dellist {}\\nlappend dellist [format \\\"/var/tmp/appsvcs_apmapply_%s.sh\\\" $app]\\n# lappend dellist [format \\\"/var/tmp/appsvcs_postdeploy_%s.conf\\\" $app]\\n# lappend dellist [format \\\"/var/tmp/appsvcs_load_postdeploy_%s.sh\\\" $app]\\n\\nputs \\\"$logprefix Cleaning up...\\\"\\nforeach df $dellist {\\n\\tif { [file exists $df] } {\\n\\t\\tputs \\\"$logprefix  Deleting file '$df'\\\"\\n\\t\\tfile delete $df\\n\\t}\\n}\\n\\ntmsh::delete sys icall handler periodic postdeploy_bundler\\ntmsh::modify sys icall handler periodic postdeploy_final first-occurrence now status active\\nif { $strict_updates eq \\\"enabled\\\" } {\\n\\ttmsh::modify sys application service $aso strict-updates enabled\\n}\\n\\nset systemTime [clock seconds]\\nputs \\\"$logprefix Finished at [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S]\\\"\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"FINISHED\\\"\\n    }\\n    description none\\n    events none\\n}\\n\\nsys icall handler periodic %APP_PATH%/postdeploy_bundler {\\n    app-service %APP_PATH%/%APP_NAME%\\n    first-occurrence %ICALLTIME%\\n    interval 3000\\n    last-occurrence now+10m\\n    script %APP_PATH%/postdeploy_bundler\\n    status active\\n}\\n  };\\n\\n  set bundler_apm_importcmd \\\"\\\"\\n  if { [llength $bundler_apm_policies] == 1 } {\\n    switch -glob $version_info(version) {\\n      11.5* {\\n        #ng_export <access_profile_name> <filename> [<partition>]\\n        set bundler_apm_importcmd [format \\\"/usr/bin/ng_import %s %s.app/bundled_apm_policy %s\\\" $bundled_apm_filename $app $partition]\\n      }\\n      11.6* {\\n        #ng_import [-s] <templatefile.conf.tar[.gz]> <new_name> [-p|-partition <partition>]\\n        set bundler_apm_importcmd [format \\\"/usr/bin/ng_import %s %s.app/bundled_apm_policy -p %s\\\" $bundled_apm_filename $app $partition]\\n      }\\n      12.* {\\n        #ng_import [-s] <templatefile.conf.tar[.gz]> <new_name> [-p|-partition <partition>]\\n        set bundler_apm_importcmd [format \\\"/usr/bin/ng_import %s %s.app/bundled_apm_policy -p %s\\\" $bundled_apm_filename $app $partition]\\n      }\\n      default { error \\\"The TMOS version running on this device does not support the preserve APM deployment modes\\\" }\\n    }\\n  }\\n\\n  set bundler_icall_time [clock format [expr {[clock seconds] + $::POSTDEPLOY_DELAY}] -format {%Y-%m-%d:%H:%M:%S}]\\n  set bundler_script_map [list %APP_NAME%  $::app \\\\\\n                       %APP_PATH%      $::app_path \\\\\\n                       %VS_NAME%       $::vs__Name \\\\\\n                       %PARTITION%     $::partition \\\\\\n                       %ENABLEVS%      $bundler_enablevs \\\\\\n                       %ASMPOLICYLIST% $bundler_asm_deploy \\\\\\n                       %APMPOLICYLIST% $bundler_apm_deploy \\\\\\n                       %TIMESTAMP%     $bundler_timestamp \\\\\\n                       %APMIMPORTCMD%  $bundler_apm_importcmd \\\\\\n                       %ICALLTIME%     $bundler_icall_time \\\\\\n                       %NEWDEPLOY%     $newdeploy \\\\\\n                       %REDEPLOY%      $redeploy \\\\\\n                       %ASMMODE%       $bundler_asm_mode \\\\\\n                       %APMMODE%       $bundler_apm_mode \\\\\\n                       %APMASSOCIATE%  $bundler_apm_associate \\\\\\n                       %DEFERREDCMDS%  [join $bundler_deferred_cmds \\\"\\\\n\\\"] \\\\\\n                       %STRICTUPDATES% $iapp__strictUpdates ]\\n\\n  set bundler_icall_src [string map $bundler_script_map $bundler_icall_tmpl]\\n  debug [list bundler icall_src] [format \\\"%s\\\" $bundler_icall_src] 10\\n  debug [list bundler icall_handler] [format \\\"creating iCall handler; executing postdeploy script at: %s\\\" $bundler_icall_time] 7\\n\\n  set fn [format \\\"/var/tmp/appsvcs_postdeploy_%s.conf\\\" $app]\\n  catch {\\n      set fh [open $fn w]\\n      puts $fh $bundler_icall_src\\n      close $fh\\n  } {}\\n\\n  debug [list bundler deploy] \\\"Bundled policy deployment will complete momentarily...\\\" 5\\n}\\n\\nif { [string length $vs__RouteAdv] > 0 && $vs__RouteAdv ne \\\"disabled\\\" } {\\n  switch $vs__RouteAdv {\\n    \\\"any_vs\\\" { set routeadv_mode \\\"any\\\" }\\n    \\\"all_vs\\\" { set routeadv_mode \\\"all\\\" }\\n    \\\"always\\\" { set routeadv_mode \\\"none\\\" }\\n    default { error \\\"The value specified for the Route Advertisement mode (vs__RouteAdv) is invalid\\\" }\\n  }\\n  debug [list virtual_address route-adv] [format \\\"enabling route advertisement for virtual address %s with mode %s (postdeploy_final)\\\" $vs_dest_addr $routeadv_mode] 5\\n  lappend postfinal_deferred_cmds [create_escaped_tmsh [format \\\"tmsh::modify ltm virtual-address /%s/%s route-advertisement enabled\\\" $partition $vs_dest_addr]]\\n  lappend postfinal_deferred_cmds [create_escaped_tmsh [format \\\"tmsh::modify ltm virtual-address /%s/%s server-scope %s\\\" $partition $vs_dest_addr $routeadv_mode]]\\n}\\n\\nif { [string length $vs__VirtualAddrAdvOptions] > 0 } {\\n  set cmd [format \\\"tmsh::modify ltm virtual-address /%s/%s\\\" $partition $vs_dest_addr]\\n  if { [string length $vs__VirtualAddrAdvOptions] > 0 } {\\n    debug [list virtual_address adv_options] \\\"processing advanced options string\\\" 7\\n    append cmd [format \\\" %s\\\" [process_options_string $vs__VirtualAddrAdvOptions \\\"\\\" \\\"\\\"]]\\n  }\\n  debug [list virtual_address adv_options] $cmd 5\\n  lappend postfinal_deferred_cmds [create_escaped_tmsh $cmd]\\n}\\n\\n# Call the custom_extensions_end proc to allow site-specific customizations\\ncustom_extensions_end\\n\\nset postfinal_icall_tmpl {\\nsys icall script %APP_PATH%/postdeploy_final {\\n    app-service %APP_PATH%/%APP_NAME%\\n    definition {\\nset app %APP_NAME%\\nset app_path %APP_PATH%\\nset partition %PARTITION%\\nset vs_name %VS_NAME%\\nset newdeploy %NEWDEPLOY%\\nset redeploy %REDEPLOY%\\nset strict_updates %STRICTUPDATES%\\n\\nset aso \\\"/$partition/${app}.app/$app\\\"\\nset iaso [format \\\"sys.application.service %s\\\" $aso]\\nset logprefix \\\"\\\\[appsvcs_postdeploy_final\\\\]\\\\[$app\\\\]\\\"\\n\\nset systemTime [clock seconds]\\nputs \\\"$logprefix Starting at [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S]\\\"\\n\\ntmsh::cd $app_path\\nputs \\\"$logprefix Setting iCall handler to inactive...\\\"\\ntmsh::modify sys application service $aso strict-updates disabled\\ntmsh::modify sys icall handler periodic postdeploy_final status inactive\\n\\nistats::set [format \\\"%s string deploy.postdeploy_final\\\" $iaso] \\\"STARTED\\\"\\nistats::set [format \\\"%s string deploy.postdeploy_final\\\" $iaso] \\\"DEFERRED_CMDS_IN_PROGRESS\\\"\\nputs \\\"$logprefix Executing deferred commands...\\\"\\n%DEFERREDCMDS%\\nputs \\\"$logprefix Completed executing deferred commands...\\\"\\nistats::set [format \\\"%s string deploy.postdeploy_final\\\" $iaso] \\\"DEFERRED_CMDS_COMPLETE\\\"\\n\\ntmsh::delete sys icall handler periodic postdeploy_final\\nif { $strict_updates eq \\\"enabled\\\" } {\\n\\ttmsh::modify sys application service $aso strict-updates enabled\\n}\\n#tmsh::save sys config\\n\\nset systemTime [clock seconds]\\nputs \\\"$logprefix Finished at [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S]\\\"\\nistats::set [format \\\"%s string deploy.postdeploy_final\\\" $iaso] [format \\\"FINISHED_%s\\\" $systemTime]\\n    }\\n    description none\\n    events none\\n}\\n\\nsys icall handler periodic %APP_PATH%/postdeploy_final {\\n    app-service %APP_PATH%/%APP_NAME%\\n    first-occurrence %ICALLTIME%\\n    interval 3000\\n    last-occurrence now+10m\\n    script %APP_PATH%/postdeploy_final\\n    status %HANDLER_STATE%\\n}\\n\\ncli script /Common/appsvcs_get_istat {\\nproc script::init {} {\\n}\\n\\nproc script::run {} {\\n    if { $tmsh::argc < 2 } {\\n        puts \\\"Please specify a iStat key to get\\\"\\n        exit\\n    }\\n    puts [istats::get [lindex $tmsh::argv 1]]\\n}\\n\\nproc script::help {} {\\n}\\n\\nproc script::tabc {} {\\n}\\n}\\n};\\n\\nset postfinal_handler_state \\\"inactive\\\"\\nif { $postdeploy_final_state } {\\n  set postfinal_handler_state \\\"active\\\"\\n}\\n\\nset postfinal_deferred_cmds_str [join $postfinal_deferred_cmds \\\"\\\\n\\\"]\\n\\nset postfinal_icall_time [clock format [expr {[clock seconds] + $::POSTDEPLOY_DELAY}] -format {%Y-%m-%d:%H:%M:%S}]\\nset postfinal_script_map [list %APP_NAME%  $::app \\\\\\n                     %APP_PATH%      $::app_path \\\\\\n                     %VS_NAME%       $::vs__Name \\\\\\n                     %PARTITION%     $::partition \\\\\\n                     %ICALLTIME%     $postfinal_icall_time \\\\\\n                     %NEWDEPLOY%     $newdeploy \\\\\\n                     %REDEPLOY%      $redeploy \\\\\\n                     %DEFERREDCMDS%  $postfinal_deferred_cmds_str \\\\\\n                     %STRICTUPDATES% $iapp__strictUpdates \\\\\\n                     %HANDLER_STATE% $postfinal_handler_state ]\\n\\nset postfinal_icall_src [string map $postfinal_script_map $postfinal_icall_tmpl]\\ndebug [list postfinal icall_src] [format \\\"%s\\\" $postfinal_icall_src] 10\\ndebug [list postfinal icall_handler] [format \\\"creating iCall handler; executing postdeploy_final script at: %s\\\" $postfinal_icall_time] 7\\n\\nset fn [format \\\"/var/tmp/appsvcs_postdeploy_%s.conf\\\" $app]\\ncatch {\\n    if { $bundler_all_deploy } {\\n      set fh [open $fn a]\\n    } else {\\n      set fh [open $fn w]\\n    }\\n    puts $fh \\\"\\\"\\n    puts $fh $postfinal_icall_src\\n    close $fh\\n} {}\\n\\nset fn [format \\\"/var/tmp/appsvcs_load_postdeploy_%s.sh\\\" $app]\\ncatch {\\n    set fh [open $fn w]\\n    puts $fh \\\"sleep 5\\\"\\n    puts $fh [format \\\"tmsh load sys config file /var/tmp/appsvcs_postdeploy_%s.conf merge\\\" $app]\\n    puts $fh [format \\\"rm -f /var/tmp/appsvcs_postdeploy_%s.conf\\\" $app]\\n    puts $fh [format \\\"rm -f /var/tmp/appsvcs_load_postdeploy_%s.sh\\\" $app]\\n    close $fh\\n    exec chmod 777 $fn\\n    exec $fn &\\n} {}\\n\\nif { $iapp__strictUpdates eq \\\"disabled\\\" } {\\n  debug [list strict_updates] \\\"disabling strict updates\\\" 5\\n  tmsh::modify [format \\\"sys application service %s/%s strict-updates disabled\\\" $app_path $app]\\n}\\n\\nset runTime [expr {[clock seconds] - $startTime}]\\ndebug [list stop] [format \\\"Finished app_name=%s, total run time was %s seconds\\\" $app $runTime] 0\\n\", \"macro\": \"\", \"roleAcl\": [\"admin\", \"manager\", \"resource-admin\"], \"presentation\": \"section intro {\\n\\tmessage hello\\n}\\n\\nsection iapp {\\n\\tchoice strictUpdates default \\\"enabled\\\" {\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice appStats default \\\"enabled\\\" {\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tstring mode display \\\"large\\\" default \\\"auto\\\"\\n\\tstring logLevel display \\\"large\\\" default \\\"7\\\"\\n\\tstring routeDomain display \\\"large\\\" default \\\"auto\\\"\\n\\tchoice asmDeployMode display \\\"large\\\" default \\\"preserve-bypass\\\" {\\n\\t\\t\\\"preserve-bypass\\\",\\n\\t\\t\\\"preserve-block\\\",\\n\\t\\t\\\"redeploy-bypass\\\",\\n\\t\\t\\\"redeploy-block\\\"\\n\\t}\\n\\tchoice apmDeployMode display \\\"large\\\" default \\\"preserve-bypass\\\" {\\n\\t\\t\\\"preserve-bypass\\\",\\n\\t\\t\\\"preserve-block\\\",\\n\\t\\t\\\"redeploy-bypass\\\",\\n\\t\\t\\\"redeploy-block\\\"\\n\\t}\\n}\\n\\nsection pool {\\n\\tstring addr required display \\\"large\\\" validator \\\"IpAddress\\\" default \\\"\\\"\\n\\tstring mask required display \\\"large\\\" validator \\\"IpAddress\\\" default \\\"255.255.255.255\\\"\\n\\tstring port required display \\\"small\\\" validator \\\"PortNumber\\\" default \\\"\\\"\\n\\tstring DefaultPoolIndex display \\\"small\\\" validator \\\"NonNegativeNumber\\\" default \\\"0\\\"\\n\\ttable Pools {\\n\\t\\tstring Index display \\\"small\\\" validator \\\"NonNegativeNumber\\\" default \\\"0\\\"\\n\\t\\tstring Name display \\\"medium\\\" default \\\"\\\"\\n\\t\\tstring Description display \\\"medium\\\" default \\\"\\\"\\n\\t\\tchoice LbMethod display \\\"medium\\\" default \\\"round-robin\\\" {\\n\\t\\t\\t\\\"dynamic-ratio-member\\\",\\n\\t\\t\\t\\\"dynamic-ratio-node\\\",\\n\\t\\t\\t\\\"fastest-app-response\\\",\\n\\t\\t\\t\\\"fastest-node\\\",\\n\\t\\t\\t\\\"least-connections-member\\\",\\n\\t\\t\\t\\\"least-connections-node\\\",\\n\\t\\t\\t\\\"least-sessions\\\",\\n\\t\\t\\t\\\"observed-member\\\",\\n\\t\\t\\t\\\"observed-node\\\",\\n\\t\\t\\t\\\"predictive-member\\\",\\n\\t\\t\\t\\\"predictive-node\\\",\\n\\t\\t\\t\\\"round-robin\\\",\\n\\t\\t\\t\\\"ratio-member\\\",\\n\\t\\t\\t\\\"ratio-node\\\",\\n\\t\\t\\t\\\"ratio-session\\\",\\n\\t\\t\\t\\\"ratio-least-connections-member\\\",\\n\\t\\t\\t\\\"ratio-least-connections-node\\\",\\n\\t\\t\\t\\\"weighted-least-connections-member\\\"\\n\\t\\t}\\n\\t\\tstring Monitor display \\\"medium\\\" default \\\"\\\"\\n\\t\\tstring AdvOptions display \\\"medium\\\" default \\\"\\\"\\n\\t}\\n\\tstring MemberDefaultPort display \\\"small\\\" default \\\"\\\"\\n\\ttable Members {\\n\\t\\tstring Index display \\\"small\\\" validator \\\"NonNegativeNumber\\\" default \\\"0\\\"\\n\\t\\teditchoice IPAddress display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list ltm node]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\t\\tstring Port display \\\"small\\\" default \\\"80\\\"\\n\\t\\tstring ConnectionLimit display \\\"medium\\\" default \\\"0\\\"\\n\\t\\tstring Ratio display \\\"small\\\" default \\\"1\\\"\\n\\t\\tstring PriorityGroup display \\\"small\\\" default \\\"0\\\"\\n\\t\\tchoice State display \\\"large\\\"  default \\\"enabled\\\" {\\n\\t\\t\\t\\\"enabled\\\",\\n\\t\\t\\t\\\"drain-disabled\\\",\\n\\t\\t\\t\\\"disabled\\\"\\n\\t\\t}\\n\\t\\tstring AdvOptions display \\\"medium\\\"\\n\\t}\\n}\\n\\nsection monitor {\\n\\ttable Monitors {\\n\\t\\tstring Index display \\\"small\\\" validator \\\"NonNegativeNumber\\\" default \\\"0\\\"\\n\\t\\tstring Name display \\\"medium\\\" default \\\"\\\"\\n\\t\\tstring Type display \\\"medium\\\" default \\\"\\\"\\n\\t\\tstring Options display \\\"medium\\\" default \\\"\\\"\\n\\t}\\n}\\n\\nsection vs {\\n\\ttable Listeners {\\n\\t\\tstring Listener display \\\"large\\\"\\n\\t\\tstring Destination display \\\"medium\\\" default \\\"\\\"\\n\\t}\\n\\tstring Name display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring Description display \\\"xxlarge\\\" default \\\"\\\"\\n\\tchoice RouteAdv display \\\"medium\\\" default \\\"disabled\\\" {\\n\\t\\t\\\"disabled\\\",\\n\\t\\t\\\"all_vs\\\",\\n\\t\\t\\\"any_vs\\\",\\n\\t\\t\\\"always\\\"\\n\\t}\\n\\tstring SourceAddress display \\\"large\\\" default \\\"0.0.0.0/0\\\"\\n\\tstring IpProtocol display \\\"small\\\" default \\\"tcp\\\"\\n\\tstring ConnectionLimit display \\\"medium\\\" default \\\"0\\\"\\n\\teditchoice ProfileClientProtocol display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile tcp} {ltm profile udp} {ltm profile fastl4}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileServerProtocol display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile tcp} {ltm profile udp} {ltm profile fastl4}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileHTTP display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile http}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileOneConnect display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile one-connect}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileCompression display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile http-compression}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\tstring ProfileAnalytics display \\\"large\\\" default \\\"\\\"\\n\\teditchoice ProfileRequestLogging display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile request-log}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileDefaultPersist display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm persistence cookie} {ltm persistence dest-addr} {ltm persistence hash} {ltm persistence msrdp} {ltm persistence sip} {ltm persistence source-addr} {ltm persistence ssl} {ltm persistence universal}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileFallbackPersist display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm persistence cookie} {ltm persistence dest-addr} {ltm persistence hash} {ltm persistence msrdp} {ltm persistence sip} {ltm persistence source-addr} {ltm persistence ssl} {ltm persistence universal}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice SNATConfig display \\\"large\\\" default \\\"automap\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm snatpool}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileServerSSL display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile server-ssl}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileClientSSL display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile client-ssl}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileClientSSLCert display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {sys file ssl-cert}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileClientSSLKey display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {sys file ssl-key}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileClientSSLChain display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {sys file ssl-cert}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\tstring ProfileClientSSLCipherString display \\\"xxlarge\\\" default \\\"DEFAULT\\\"\\n\\tstring ProfileClientSSLAdvOptions display \\\"xxlarge\\\" default \\\"\\\"\\n\\teditchoice ProfileSecurityLogProfiles display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {security log profile}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileSecurityIPBlacklist display \\\"large\\\"  default \\\"none\\\" {\\n\\t\\t\\\"none\\\",\\n\\t\\t\\\"enabled-block\\\",\\n\\t\\t\\\"enabled-log\\\"\\n\\t}\\n\\teditchoice ProfileSecurityDoS display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {security dos profile}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileAccess display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {apm profile access}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileConnectivity display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {apm profile connectivity}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\tstring ProfilePerRequest display \\\"xxlarge\\\" default \\\"\\\"\\n\\tchoice OptionSourcePort display \\\"large\\\"  default \\\"preserve\\\" {\\n\\t\\t\\\"preserve\\\",\\n\\t\\t\\\"preserve-strict\\\",\\n\\t\\t\\\"change\\\"\\n\\t}\\n\\tchoice OptionConnectionMirroring default \\\"disabled\\\" {\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\teditchoice Irules display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm rule}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\ttable BundledItems {\\n\\t\\teditchoice Resource display \\\"large\\\"  {\\n\\t\\t\\t\\\"** no bundled items **\\\"\\n\\t\\t}\\n\\t}\\n\\tstring AdvOptions display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring AdvProfiles display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring AdvPolicies display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring VirtualAddrAdvOptions display \\\"xxlarge\\\" default \\\"\\\"\\n}\\n\\nsection l7policy {\\n\\teditchoice strategy display \\\"large\\\" default \\\"/Common/first-match\\\" {\\n\\t\\t\\\"/Common/first-match\\\",\\n\\t\\t\\\"/Common/best-match\\\",\\n\\t\\t\\\"/Common/all-match\\\"\\n\\t}\\n\\tstring defaultASM display \\\"large\\\" default \\\"bypass\\\"\\n\\tstring defaultL7DOS display \\\"large\\\" default \\\"bypass\\\"\\n\\ttable rulesMatch {\\n\\t\\tstring Group display \\\"small\\\" default \\\"\\\"\\n\\t\\teditchoice Operand display \\\"xlarge\\\" {\\n\\t\\t\\t\\\"client-ssl/request/cipher\\\",\\n\\t\\t\\t\\\"client-ssl/request/cipher-bits\\\",\\n\\t\\t\\t\\\"client-ssl/request/protocol\\\",\\n\\t\\t\\t\\\"client-ssl/response/cipher\\\",\\n\\t\\t\\t\\\"client-ssl/response/cipher-bits\\\",\\n\\t\\t\\t\\\"client-ssl/response/protocol\\\",\\n\\t\\t\\t\\\"http-basic-auth/request/username\\\",\\n\\t\\t\\t\\\"http-basic-auth/request/password\\\",\\n\\t\\t\\t\\\"http-cookie/request/all/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-header/request/all/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-header/request/all/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-host/request/all\\\",\\n\\t\\t\\t\\\"http-host/request/host\\\",\\n\\t\\t\\t\\\"http-host/request/port\\\",\\n\\t\\t\\t\\\"http-method/request/all\\\",\\n\\t\\t\\t\\\"http-referer/request/all\\\",\\n\\t\\t\\t\\\"http-referer/request/extension\\\",\\n\\t\\t\\t\\\"http-referer/request/host\\\",\\n\\t\\t\\t\\\"http-referer/request/path\\\",\\n\\t\\t\\t\\\"http-referer/request/path-segment/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"http-referer/request/port\\\",\\n\\t\\t\\t\\\"http-referer/request/query-parameter/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-referer/request/scheme\\\",\\n\\t\\t\\t\\\"http-referer/request/unnamed-query-parameter/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/domain/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/expiry/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/path/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/value/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/version/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-status/response/all\\\",\\n\\t\\t\\t\\\"http-status/response/code\\\",\\n\\t\\t\\t\\\"http-status/response/text\\\",\\n\\t\\t\\t\\\"http-uri/request/all\\\",\\n\\t\\t\\t\\\"http-uri/request/extension\\\",\\n\\t\\t\\t\\\"http-uri/request/host\\\",\\n\\t\\t\\t\\\"http-uri/request/path\\\",\\n\\t\\t\\t\\\"http-uri/request/path-segment/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"http-uri/request/port\\\",\\n\\t\\t\\t\\\"http-uri/request/query-parameter/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-uri/request/scheme\\\",\\n\\t\\t\\t\\\"http-uri/request/unnamed-query-parameter/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"http-version/request/all\\\",\\n\\t\\t\\t\\\"http-version/request/major\\\",\\n\\t\\t\\t\\\"http-version/request/minor\\\",\\n\\t\\t\\t\\\"http-version/request/protocol\\\",\\n\\t\\t\\t\\\"http-version/response/all\\\",\\n\\t\\t\\t\\\"http-version/response/major\\\",\\n\\t\\t\\t\\\"http-version/response/minor\\\",\\n\\t\\t\\t\\\"http-version/response/protocol\\\",\\n\\t\\t\\t\\\"ssl-cert/ssl-server-handshake/common-name/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-client-hello/alpn\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-client-hello/npn\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-client-hello/server-name\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-server-hello/alpn\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-server-hello/npn\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-server-hello/server-name\\\",\\n\\t\\t\\t\\\"tcp/request/mss/internal\\\",\\n\\t\\t\\t\\\"tcp/request/port/internal\\\",\\n\\t\\t\\t\\\"tcp/request/port/local\\\",\\n\\t\\t\\t\\\"tcp/request/route-domain/internal\\\",\\n\\t\\t\\t\\\"tcp/request/rtt/internal\\\",\\n\\t\\t\\t\\\"tcp/request/vlan/internal\\\",\\n\\t\\t\\t\\\"tcp/request/vlan-id/internal\\\"\\n\\t\\t}\\n\\t\\tchoice Negate display \\\"small\\\" default \\\"no\\\" {\\n\\t\\t\\t\\\"no\\\",\\n\\t\\t\\t\\\"yes\\\"\\n\\t\\t}\\n\\t\\tchoice Condition display \\\"large\\\" {\\n\\t\\t\\t\\\"equals\\\",\\n\\t\\t\\t\\\"starts-with\\\",\\n\\t\\t\\t\\\"ends-with\\\",\\n\\t\\t\\t\\\"contains\\\",\\n\\t\\t\\t\\\"greater\\\",\\n\\t\\t\\t\\\"greater-or-equal\\\",\\n\\t\\t\\t\\\"less\\\",\\n\\t\\t\\t\\\"less-or-equal\\\"\\n\\t\\t}\\n\\t\\tstring Value display \\\"large\\\" default \\\"\\\"\\n\\t\\tchoice CaseSensitive display \\\"small\\\" default \\\"no\\\" {\\n\\t\\t\\t\\\"no\\\",\\n\\t\\t\\t\\\"yes\\\"\\n\\t\\t}\\n\\t\\tchoice Missing display \\\"small\\\" default \\\"no\\\" {\\n\\t\\t\\t\\\"no\\\",\\n\\t\\t\\t\\\"yes\\\"\\n\\t\\t}\\n\\t}\\n\\ttable rulesAction {\\n\\t\\tstring Group display \\\"small\\\" default \\\"\\\"\\n\\t\\teditchoice Target display \\\"xlarge\\\" {\\n\\t\\t\\t\\\"asm/request/enable/policy\\\",\\n\\t\\t\\t\\\"asm/request/disable\\\",\\n\\t\\t\\t\\\"cache/request/enable/pin\\\",\\n\\t\\t\\t\\\"cache/request/disable\\\",\\n\\t\\t\\t\\\"cache/response/enable/pin\\\",\\n\\t\\t\\t\\\"cache/respones/disable\\\",\\n\\t\\t\\t\\\"compress/request/enable\\\",\\n\\t\\t\\t\\\"compress/request/disable\\\",\\n\\t\\t\\t\\\"compress/response/enable\\\",\\n\\t\\t\\t\\\"compress/response/disable\\\",\\n\\t\\t\\t\\\"decompress/request/enable\\\",\\n\\t\\t\\t\\\"decompress/request/disable\\\",\\n\\t\\t\\t\\\"decompress/response/enable\\\",\\n\\t\\t\\t\\\"decompress/response/disable\\\",\\n\\t\\t\\t\\\"forward/request/reset\\\",\\n\\t\\t\\t\\\"forward/request/select/clone-pool\\\",\\n\\t\\t\\t\\\"forward/request/select/member\\\",\\n\\t\\t\\t\\\"forward/request/select/nexthop\\\",\\n\\t\\t\\t\\\"forward/request/select/node\\\",\\n\\t\\t\\t\\\"forward/request/select/pool\\\",\\n\\t\\t\\t\\\"forward/request/select/rateclass\\\",\\n\\t\\t\\t\\\"forward/request/select/snat\\\",\\n\\t\\t\\t\\\"forward/request/select/snatpool\\\",\\n\\t\\t\\t\\\"forward/request/select/vlan\\\",\\n\\t\\t\\t\\\"forward/request/select/vlan-id\\\",\\n\\t\\t\\t\\\"http/request/enable\\\",\\n\\t\\t\\t\\\"http/request/disable\\\",\\n\\t\\t\\t\\\"http-cookie/request/insert/name,value\\\",\\n\\t\\t\\t\\\"http-cookie/request/remove/name\\\",\\n\\t\\t\\t\\\"http-header/request/insert/name,value\\\",\\n\\t\\t\\t\\\"http-header/request/remove/name\\\",\\n\\t\\t\\t\\\"http-header/request/replace/name,value\\\",\\n\\t\\t\\t\\\"http-header/response/insert/name,value\\\",\\n\\t\\t\\t\\\"http-header/response/remove/name\\\",\\n\\t\\t\\t\\\"http-header/response/replace/name,value\\\",\\n\\t\\t\\t\\\"http-host/request/replace/value\\\",\\n\\t\\t\\t\\\"http-referer/request/insert/value\\\",\\n\\t\\t\\t\\\"http-referer/request/remove\\\",\\n\\t\\t\\t\\\"http-referer/request/replace/value\\\",\\n\\t\\t\\t\\\"http-reply/request/redirect/location\\\",\\n\\t\\t\\t\\\"http-reply/response/redirect/location\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/insert/name,domain,path,value\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/remove/name\\\",\\n\\t\\t\\t\\\"http-uri/response/replace/path,query-string,value\\\",\\n\\t\\t\\t\\\"l7dos/request/enable/from-profile\\\",\\n\\t\\t\\t\\\"l7dos/request/disable\\\",\\n\\t\\t\\t\\\"log/request/write/message\\\",\\n\\t\\t\\t\\\"log/response/write/message\\\",\\n\\t\\t\\t\\\"request-adapt/request/enable/internal-virtual-server\\\",\\n\\t\\t\\t\\\"request-adapt/request/disable\\\",\\n\\t\\t\\t\\\"request-adapt/response/enable/internal-virtual-server\\\",\\n\\t\\t\\t\\\"request-adapt/response/disable\\\",\\n\\t\\t\\t\\\"response-adapt/request/enable/internal-virtual-server\\\",\\n\\t\\t\\t\\\"response-adapt/request/disable\\\",\\n\\t\\t\\t\\\"response-adapt/response/enable/internal-virtual-server\\\",\\n\\t\\t\\t\\\"request-adapt/response/disable\\\",\\n\\t\\t\\t\\\"server-ssl/request/enable\\\",\\n\\t\\t\\t\\\"server-ssl/request/disable\\\",\\n\\t\\t\\t\\\"tcl/request/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcl/response/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcl/ssl-client-hello/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcl/ssl-server-handshake/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcl/ssl-server-hello/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcp-nagle/request/enable\\\",\\n\\t\\t\\t\\\"tcp-nagle/request/disable\\\"\\n\\t\\t}\\n\\t\\tstring Parameter display \\\"large\\\" default \\\"\\\"\\n\\t}\\n}\\n\\nsection feature {\\n\\tchoice statsTLS display \\\"medium\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice statsHTTP display \\\"medium\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice insertXForwardedFor display \\\"medium\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice redirectToHTTPS display \\\"medium\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice sslEasyCipher display \\\"medium\\\" default \\\"disabled\\\" {\\n\\t\\t\\\"compatible\\\",\\n\\t\\t\\\"medium\\\",\\n\\t\\t\\\"high\\\",\\n\\t\\t\\\"tls_1.2\\\",\\n\\t\\t\\\"tls_1.1+1.2\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\teditchoice securityEnableHSTS display \\\"xlarge\\\" default \\\"disabled\\\" {\\n\\t\\t\\\"disabled\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"enabled-preload\\\",\\n\\t\\t\\\"enabled-subdomain\\\",\\n\\t\\t\\\"enabled-preload-subdomain\\\"\\n\\t}\\n\\tchoice easyL4Firewall display \\\"xlarge\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"base\\\",\\n\\t\\t\\\"base+ip_blacklist_block\\\",\\n\\t\\t\\\"base+ip_blacklist_log\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\ttable easyL4FirewallBlacklist {\\n\\t\\tstring CIDRRange display \\\"large\\\"\\n\\t}\\n\\ttable easyL4FirewallSourceList {\\n\\t\\tstring CIDRRange display \\\"large\\\" default \\\"0.0.0.0/0\\\"\\n\\t}\\n}\\n\\nsection extensions {\\n\\tstring Field1 display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring Field2 display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring Field3 display \\\"xxlarge\\\" default \\\"\\\"\\n}\\n\\n\\ntext {\\n\\tintro \\\"F5 Application Services Integration iApp v2.0.003 (Community Edition)\\\"\\n\\tintro.hello \\\"Introduction\\\" \\\"Please complete the following template\\\"\\n\\n\\tiapp \\\"iApp Options\\\"\\n\\tiapp.strictUpdates \\\"iApp: Strict Updates\\\"\\n\\tiapp.appStats \\\"iApp: Statistics Handler Creation\\\"\\n\\tiapp.mode \\\"iApp: Mode\\\"\\n\\tiapp.logLevel \\\"iApp: Log Level\\\"\\n\\tiapp.routeDomain \\\"iApp: Route Domain\\\"\\n\\tiapp.asmDeployMode \\\"iApp: ASM: Deployment Mode\\\"\\n\\tiapp.apmDeployMode \\\"iApp: APM: Deployment Mode\\\"\\n\\n\\tpool \\\"Virtual Server Listener & Pool Configuration\\\"\\n\\tpool.addr \\\"Virtual Server: Address\\\"\\n\\tpool.mask \\\"Virtual Server: Mask\\\"\\n\\tpool.port \\\"Virtual Server: Port\\\"\\n\\tpool.DefaultPoolIndex \\\"Virtual Server: Default Pool Index\\\"\\n\\tpool.Pools \\\"Pool: Pool Table\\\"\\n\\tpool.Pools.Index \\\"Index:\\\"\\n\\tpool.Pools.Name \\\"Name:\\\"\\n\\tpool.Pools.Description \\\"Description:\\\"\\n\\tpool.Pools.LbMethod \\\"LB Method:\\\"\\n\\tpool.Pools.Monitor \\\"Monitor(s):\\\"\\n\\tpool.Pools.AdvOptions \\\"Adv Options:\\\"\\n\\tpool.MemberDefaultPort \\\"Pool: Member Default Port\\\"\\n\\tpool.Members \\\"Pool: Members\\\"\\n\\tpool.Members.Index \\\"Pool Idx:\\\"\\n\\tpool.Members.IPAddress \\\"IP/Node Name:\\\"\\n\\tpool.Members.Port \\\"Port:\\\"\\n\\tpool.Members.ConnectionLimit \\\"Connection Limit:\\\"\\n\\tpool.Members.Ratio \\\"Ratio:\\\"\\n\\tpool.Members.PriorityGroup \\\"Priority Group:\\\"\\n\\tpool.Members.State \\\"State:\\\"\\n\\tpool.Members.AdvOptions \\\"Adv Options:\\\"\\n\\n\\tmonitor \\\"Pool Monitor(s) Configuration\\\"\\n\\tmonitor.Monitors \\\"Monitor: Monitor Table\\\"\\n\\tmonitor.Monitors.Index \\\"Index:\\\"\\n\\tmonitor.Monitors.Name \\\"Name:\\\"\\n\\tmonitor.Monitors.Type \\\"Type:\\\"\\n\\tmonitor.Monitors.Options \\\"Options:\\\"\\n\\n\\tvs \\\"Virtual Server Configuration\\\"\\n\\tvs.Listeners \\\"Virtual Server: Additional Listeners\\\"\\n\\tvs.Listeners.Listener \\\"Listener:\\\"\\n\\tvs.Listeners.Destination \\\"Destination\\\"\\n\\tvs.Name \\\"Virtual Server: Name\\\"\\n\\tvs.Description \\\"Virtual Server: Description\\\"\\n\\tvs.RouteAdv \\\"Virtual Server: Route Advertisement\\\"\\n\\tvs.SourceAddress \\\"Virtual Server: Source Address\\\"\\n\\tvs.IpProtocol \\\"Virtual Server: IP Protocol\\\"\\n\\tvs.ConnectionLimit \\\"Virtual Server: Virtual Server Connection Limit (0=unlimited)\\\"\\n\\tvs.ProfileClientProtocol \\\"Virtual Server: Client-side L4 Protocol Profile\\\"\\n\\tvs.ProfileServerProtocol \\\"Virtual Server: Server-side L4 Protocol Profile\\\"\\n\\tvs.ProfileHTTP \\\"Virtual Server: HTTP Profile\\\"\\n\\tvs.ProfileOneConnect \\\"Virtual Server: OneConnect Profile\\\"\\n\\tvs.ProfileCompression \\\"Virtual Server: Compression Profile\\\"\\n\\tvs.ProfileAnalytics \\\"Virtual Server: Analytics Profile\\\"\\n\\tvs.ProfileRequestLogging \\\"Virtual Server: Request Logging Profile\\\"\\n\\tvs.ProfileDefaultPersist \\\"Virtual Server: Default Persistence Profile\\\"\\n\\tvs.ProfileFallbackPersist \\\"Virtual Server: Fallback Persistence Profile\\\"\\n\\tvs.SNATConfig \\\"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\\\"\\n\\tvs.ProfileServerSSL \\\"Virtual Server: Server SSL Profile\\\"\\n\\tvs.ProfileClientSSL \\\"Virtual Server: Client SSL Profile\\\"\\n\\tvs.ProfileClientSSLCert \\\"Virtual Server: Client SSL Certificate\\\"\\n\\tvs.ProfileClientSSLKey \\\"Virtual Server: Client SSL Key\\\"\\n\\tvs.ProfileClientSSLChain \\\"Virtual Server: Client SSL Certificate Chain\\\"\\n\\tvs.ProfileClientSSLCipherString \\\"Virtual Server: Client SSL Cipher String\\\"\\n\\tvs.ProfileClientSSLAdvOptions \\\"Virtual Server: Client SSL Advanced Options\\\"\\n\\tvs.ProfileSecurityLogProfiles \\\"Virtual Server: Security Logging Profiles\\\"\\n\\tvs.ProfileSecurityIPBlacklist \\\"Virtual Server: IP Blacklist Profile\\\"\\n\\tvs.ProfileSecurityDoS \\\"Virtual Server: Security: DoS Profile\\\"\\n\\tvs.ProfileAccess \\\"Virtual Server: Access Profile\\\"\\n\\tvs.ProfileConnectivity \\\"Virtual Server: Connectivity Profile\\\"\\n\\tvs.ProfilePerRequest \\\"Virtual Server: Per-Request Profile\\\"\\n\\tvs.OptionSourcePort \\\"Virtual Server: Source Port Behavior\\\"\\n\\tvs.OptionConnectionMirroring \\\"Virtual Server: Connection Mirroring\\\"\\n\\tvs.Irules \\\"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\\\"\\n\\tvs.BundledItems \\\"Virtual Server: Bundled Items\\\"\\n\\tvs.BundledItems.Resource \\\"Resource:\\\"\\n\\tvs.AdvOptions \\\"Virtual Server: Advanced Options\\\"\\n\\tvs.AdvProfiles \\\"Virtual Server: Advanced Profiles\\\"\\n\\tvs.AdvPolicies \\\"Virtual Server: Advanced Policies\\\"\\n\\tvs.VirtualAddrAdvOptions \\\"Virtual Address: Advanced Options\\\"\\n\\n\\tl7policy \\\"L7 Traffic Policy\\\"\\n\\tl7policy.strategy \\\"L7 Policy: Match Strategy\\\"\\n\\tl7policy.defaultASM \\\"L7 Policy: Default ASM Policy\\\"\\n\\tl7policy.defaultL7DOS \\\"L7 Policy: Default L7 DoS Policy\\\"\\n\\tl7policy.rulesMatch \\\"L7 Policy: Rules: Matching\\\"\\n\\tl7policy.rulesMatch.Group \\\"Group:\\\"\\n\\tl7policy.rulesMatch.Operand \\\"Operand:\\\"\\n\\tl7policy.rulesMatch.Negate \\\"Negate:\\\"\\n\\tl7policy.rulesMatch.Condition \\\"Condition:\\\"\\n\\tl7policy.rulesMatch.Value \\\"Value:\\\"\\n\\tl7policy.rulesMatch.CaseSensitive \\\"Case Sensitive:\\\"\\n\\tl7policy.rulesMatch.Missing \\\"Missing:\\\"\\n\\tl7policy.rulesAction \\\"L7 Policy: Rules: Action\\\"\\n\\tl7policy.rulesAction.Group \\\"Group:\\\"\\n\\tl7policy.rulesAction.Target \\\"Target:\\\"\\n\\tl7policy.rulesAction.Parameter \\\"Parameter:\\\"\\n\\n\\tfeature \\\"L4-7 Helpers\\\"\\n\\tfeature.statsTLS \\\"TLS/SSL: Stats Reporting\\\"\\n\\tfeature.statsHTTP \\\"HTTP: Stats Reporting\\\"\\n\\tfeature.insertXForwardedFor \\\"HTTP: Insert X-Forwarded-For Header\\\"\\n\\tfeature.redirectToHTTPS \\\"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\\\"\\n\\tfeature.sslEasyCipher \\\"TLS/SSL: Easy Cipher String (overrides VS section setting)\\\"\\n\\tfeature.securityEnableHSTS \\\"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\\\"\\n\\tfeature.easyL4Firewall \\\"Security: Firewall: Configure L4 Firewall Policy\\\"\\n\\tfeature.easyL4FirewallBlacklist \\\"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\\\"\\n\\tfeature.easyL4FirewallBlacklist.CIDRRange \\\"CIDR Block:\\\"\\n\\tfeature.easyL4FirewallSourceList \\\"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\\\"\\n\\tfeature.easyL4FirewallSourceList.CIDRRange \\\"CIDR Block:\\\"\\n\\n\\textensions \\\"Custom Extensions Section\\\"\\n\\textensions.Field1 \\\"Extensions: Field 1\\\"\\n\\textensions.Field2 \\\"Extensions: Field 2\\\"\\n\\textensions.Field3 \\\"Extensions: Field 3\\\"\\n\\n}\\n\"}], \"totalSigningStatus\": \"not-all-signed\", \"requiresBigipVersionMax\": \"\", \"ignoreVerification\": \"false\", \"requiresModules\": [\"\"], \"requiresBigipVersionMin\": \"11.0.0\"}"						},
						"description": ""
					},
					"response": []
				}
			]
		},
		{
			"name": "2_Install_on_iWorkflow",
			"description": "This request in this folder will install the appsvcs_integration_iapp iApp template on an F5 iWorkflow device.\n\nInput Variables:\niwf_mgmt\t\tF5 iWorkflow Management Address\niwf_auth_token\t\tREST API Authentication Token\n\nOutput Variables:\nappsvcs_name\tName of the installed template",
			"item": [
				{
					"name": "Install AppSvcs Template on iWorkflow",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"name\",",
									"            \"value\":\"/appsvcs_integration_v.*/i\",",
									"            \"op\":\"regex\"",
									"        }",
									"    ];",
									"    ",
									"    var populate_vars = [",
									"        {",
									"            \"name\":\"iwf_appsvcs_name\",",
									"            \"value\":\"name\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"    f5_populate_env_vars(populate_vars);",
									"} else {",
									"    postman.setEnvironmentVariable('iwf_appsvcs_name', 'appsvcs_integration_v2.0.003');",
									"}"
								]
							}
						}
					],
					"request": {
						"url": " https://{{iwf_mgmt}}/mgmt/cm/cloud/templates/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\"name\": \"appsvcs_integration_v2.0.003\", \"templateContent\": \"cli admin-partitions {\\n    update-partition Common\\n}\\nsys application template /Common/appsvcs_integration_v2.0.003 {\\n    actions {\\n        definition {\\n            html-help {\\n            }\\n            implementation {\\n# Copyright (c) 2017 F5 Networks, Inc.\\n#\\n# Licensed under the Apache License, Version 2.0 (the \\\"License\\\");\\n# you may not use this file except in compliance with the License.\\n# You may obtain a copy of the License at\\n#\\n#     http://www.apache.org/licenses/LICENSE-2.0\\n#\\n#     Unless required by applicable law or agreed to in writing, software\\n#     distributed under the License is distributed on an \\\"AS IS\\\" BASIS,\\n#     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\\n#     See the License for the specific language governing permissions and\\n#     limitations under the License.\\n#\\npackage require base64\\n\\nset startTime [clock seconds]\\nset bundler_timestamp [clock format $startTime -format {%Y%m%d%H%M%S}]\\n\\nset NAME \\\"F5 Application Services Integration iApp (Community Edition)\\\"\\nset TMPLNAME \\\"appsvcs_integration_v2.0.\\\"\\nset IMPLMAJORVERSION \\\"2.0\\\"\\nset IMPLMINORVERSION \\\"003\\\"\\nset IMPLVERSION [format \\\"%s.%s\\\" $IMPLMAJORVERSION $IMPLMINORVERSION]\\nset POSTDEPLOY_DELAY 0\\n\\nif { [tmsh::get_field_value [lindex [tmsh::get_config sys scriptd log-level] 0] log-level] eq \\\"debug\\\" } {\\n  set iapp__logLevel 10\\n}\\n\\n# Print a timestamped debug message to /var/tmp/scriptd.out\\n# Input: headers = TCL list of headers for the log message\\n#        msg = The message to log\\n#        level = Integer indicated the log level for this message\\nproc debug { headers msg level } {\\n  if { $::iapp__logLevel >= $level } {\\n    set systemTime [clock seconds]\\n    set brackets \\\"\\\"\\n    if { [llength $headers] > 0 } {\\n      set brackets [format \\\"\\\\[%s\\\\]\\\" [join $headers \\\"\\\\]\\\\[\\\"]]\\n    }\\n    set pre [format \\\"\\\\[%s %s\\\\]\\\\[%s\\\\]%s\\\" [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S] $::app $brackets]\\n    puts [format \\\"%s %s\\\" $pre [string map [list \\\"\\\\n\\\" \\\"\\\\n$pre \\\" ] $msg]]\\n  }\\n}\\n\\n# Credit for psplit: http://wiki.tcl.tk/1499\\n# Perform the equivalent of a split on a string except protect an escaped split character in the input\\n# Input: str = the string to split\\n#        seps = the charater(s) to split by\\n# Return: list $strings\\nproc psplit { str seps {protector \\\"\\\\\\\\\\\"}} {\\n    set out [list]\\n    set prev \\\"\\\"\\n    set current \\\"\\\"\\n    foreach c [split $str \\\"\\\"] {\\n        if { [string first $c $seps] >= 0 } {\\n            if { $prev eq $protector } {\\n                set current [string range $current 0 end-1]\\n                append current $c\\n            } else {\\n                lappend out $current\\n                set current \\\"\\\"\\n            }\\n            set prev \\\"\\\"\\n        } else {\\n            append current $c\\n            set prev $c\\n        }\\n    }\\n\\n    if { $current ne \\\"\\\" } {\\n        lappend out $current\\n    }\\n\\n    return $out\\n}\\n\\n# Figure out which type of environment we are executing in.\\n# Return: list $mode $folder $partition $routedomainid $newdeploy\\n# Modes: 1 = Standalone\\n#        2 = iWorkflow\\n#        3 = Cisco APIC\\n#        4 = VMware NSX\\nproc get_mode { } {\\n  set folder [tmsh::pwd]\\n  set app $tmsh::app_name\\n  set partition [lindex [split $folder /] 1]\\n  set newdeploy [catch {tmsh::get_config sys application service /$partition/$app.app/$app}]\\n  debug [list get_mode] [format \\\"starting folder=%s partition=%s newdeploy=%s\\\" $folder $partition $newdeploy] 10\\n\\n  if { ! $newdeploy } {\\n    set ::asoobj [lindex [lindex [tmsh::get_config sys application service /$partition/$app.app/$app] 0] 4]\\n  }\\n  # Set the routedomain to the partition default-route-domain\\n  if { [string tolower $::iapp__routeDomain] eq \\\"auto\\\"} {\\n    set obj [tmsh::get_config auth partition $partition default-route-domain]\\n    set routedomainid [tmsh::get_field_value [lindex $obj 0] default-route-domain]\\n    debug [list get_mode set_route_domain] [format \\\"Using partition default-route-domain; routedomainid=%s\\\" $routedomainid] 10\\n  } else {\\n    set routedomainid $::iapp__routeDomain\\n    debug [list get_mode set_route_domain] [format \\\"Using route domain override; routedomainid=%s\\\" $routedomainid] 10\\n  }\\n\\n  # Check for a mode override in $iapp__mode variable\\n  if { [string tolower $::iapp__mode] ne \\\"auto\\\" } {\\n    if { $::iapp__mode > 0 && $::iapp__mode < 4 } {\\n      debug [list get_mode mode_override] [format \\\"Mode override detected.  Setting mode to %s\\\" $::iapp__mode] 10\\n      return [list $::iapp__mode $folder $partition $routedomainid $newdeploy]\\n    } else {\\n      error \\\"The mode override specified is invalid.\\\"\\n    }\\n  }\\n\\n  # Check for a partition that starts with apic_ and return APIC mode (3) and RD if found\\n  if { [string match -nocase \\\"apic_*\\\" $partition] || [string match -nocase \\\"apic-*\\\" $partition] } {\\n    debug [list get_mode apic] \\\"partition starts with apic_, assuming APIC deployment mode (3)\\\" 10\\n    set rdobjs [tmsh::get_config net route-domain \\\"/$partition/$partition\\\" id]\\n    set routedomainid [tmsh::get_field_value [lindex $rdobjs 0] \\\"id\\\"]\\n    debug [list get_mode apic] [format \\\"rdobjs=%s routedomainid=%s\\\" $rdobjs $routedomainid] 10\\n    return [list 3 $folder $partition $routedomainid $newdeploy]\\n  }\\n\\n  # Check for an $app name that is formatted like this:\\n  # edge-<#>_<#>_virtualserver-<#>-serviceprofile-<#>\\n  # and return NSX mode (4)\\n  if { [regexp -nocase {^edge-[0-9]+_[0-9]+_virtualserver-[0-9]+-serviceprofile-[0-9]+$} $::app] } {\\n    debug [list get_mode nsx] \\\"app name matches NSX regexp, assuming NSX deployment mode (4)\\\" 10\\n    return [list 4 $folder $partition $routedomainid $newdeploy]\\n  }\\n\\n  # If we get here we can safely assume that this is either a Standalone or iWorkflow mode deployment\\n  # The only way we currently have to check for iWorkflow mode is to see if app_stats was sent\\n  if { [info exists ::app_stats] } {\\n    debug [list get_mode iworkflow] \\\"all other modes checked for and app_stats set, assuming iWorkflow deployment mode (2)\\\" 10\\n    return [list 2 $folder $partition $routedomainid $newdeploy]\\n  }\\n\\n  # Default is Standalone mode\\n  debug [list get_mode standalone] \\\"no integration vendor found, assuming Standalone deployment mode (1)\\\" 10\\n  return [list 1 $folder $partition $routedomainid $newdeploy]\\n}\\n\\n# Create a specfic option command and return it\\n# Input: $debug_id, $input_var, $option_string\\n# Return: string $cmd\\nproc generic_add_option { debug_id input_var option_string custom_format replace_commas } {\\n  set cmd \\\" \\\"\\n  if { [string length $input_var] > 0 } {\\n      if { $replace_commas == 1 } {\\n        set input_var [string map {\\\",\\\" \\\" \\\"} $input_var]\\n      }\\n\\n      if { [string length $custom_format] > 0 } {\\n        set cmd [format $custom_format $input_var]\\n      } else {\\n        set cmd [format \\\" $option_string \\\\\\\"%s\\\\\\\"\\\" $input_var]\\n      }\\n      debug [lappend debug_id generic_add_option] [format \\\"cmd=%s\\\" $cmd] 10\\n  }\\n  return $cmd\\n}\\n\\n# Check to see if an ip has a routedomain included.\\n# Return: 0=false; 1=true\\nproc has_routedomain { ip } {\\n  return [string match *%* $ip]\\n}\\n\\n# Replace a profile within a virtual server definition while preserving the existing context\\n# Input: $obj = tmsh obj representing profiles section of the VS get_config\\n#        $oldprofile = name of the profile to replace\\n#        $newprofile = name of the new profile\\n# Return: string $newprofiles (string suitable for providing to replace-all-with option)\\nproc replace_profile { obj oldprofile newprofile } {\\n  set profiles [tmsh::get_field_value [lindex $obj 0] \\\"profiles\\\"]\\n  set newprofiles \\\" { \\\"\\n  foreach profile $profiles {\\n      set junk [lindex $profile 0]\\n      set name [lindex $profile 1]\\n      set contextobj [lindex $profile 2]\\n      set context [lindex $contextobj 1]\\n      if { $name eq $oldprofile } {\\n          debug [list replace_profile] [format \\\"replace profile '%s' with '%s' context=%s\\\" $name $newprofile $context] 10\\n          append newprofiles [format \\\"%s { context %s } \\\" $newprofile $context]\\n      } else {\\n          debug [list replace_profile] [format \\\"preserve profile '%s' context=%s\\\" $name $context] 10\\n          append newprofiles [format \\\"%s { context %s } \\\" $name $context]\\n      }\\n  }\\n  append newprofiles \\\" } \\\"\\n  return $newprofiles\\n}\\n\\n# Look at a tmsh profile object and determine if $option is a valid profile option\\n# Input: $obj = tmsh obj to check\\n#        $option = option name to look for\\n# Return: 1=Valid option; 0=Invalid option\\nproc is_valid_profile_option { obj option } {\\n    debug [list is_valid_profile_option obj] [format \\\"%s\\\" $obj] 11\\n    debug [list is_valid_profile_option option] [format \\\"looking for %s\\\" $option] 11\\n    set found 0\\n    set fdx 0\\n    set fields [tmsh::get_field_names value $obj]\\n    set fields2 [tmsh::get_field_names nested $obj]\\n    debug [list is_valid_profile_option fields] [format \\\"%s\\\" $fields] 11\\n    debug [list is_valid_profile_option fields2] [format \\\"%s\\\" $fields2] 11\\n    set field_count [llength $fields]\\n    while { $fdx < $field_count } {\\n        set field [lindex $fields $fdx]\\n        if { $field == $option } {\\n          return 1\\n        }\\n        incr fdx\\n    }\\n    set field_count [llength $fields2]\\n    set fdx 0\\n    while { $fdx < $field_count } {\\n        set field [lindex $fields2 $fdx]\\n        if { $field == $option } {\\n          return 1\\n        }\\n        incr fdx\\n    }\\n    return 0\\n}\\n\\n# Process a string in the format key1=val1[;keyX=valX] and return an array\\n# Input: $string = string to process\\n# Return: array { key1 {val1} ... keyX{valX}}\\nproc process_kvp_string { string } {\\n  debug [list process_kvp_string] \\\"processing string: $string\\\" 10\\n  set pairs [psplit $string \\\";\\\"]\\n  array set ret {}\\n  foreach pair $pairs {\\n    set key [lindex [split $pair =] 0]\\n    set val [lindex [split $pair =] 1]\\n    set ret($key) $val\\n    debug [list process_kvp_string] \\\"pair=$pair key=$key val=$val\\\" 10\\n  }\\n  return [array get ret]\\n}\\n\\n# Create an object name\\n# Input: $append = string to append\\n# Return: $string\\nproc create_obj_name { append } {\\n  return [format \\\"%s/%s_%s\\\" $::app_path $::app $append]\\n}\\n\\n# Safely change a variable to a new value.  Updates the var value and modifies the ASO with the new value\\n# Input: $name = name of variable\\n#       $value = new value of the variable\\n# Return: none\\nproc change_var { name value } {\\n  debug [list change_var] \\\"updating variable $name to $value (executes post-deployment)\\\" 10\\n  set varcmd [create_escaped_tmsh [format \\\"tmsh::modify sys application service %s/%s variables modify \\\\{ %s \\\\{ value \\\\\\\"%s\\\\\\\" \\\\} \\\\}\\\" $::app_path $::app $name $value]]\\n  debug [list change_var tmsh_modify_deferred] $varcmd 1\\n  lappend ::postfinal_deferred_cmds $varcmd\\n  set [subst ::$name] $value\\n  set ::aso_config($name) $value\\n  return\\n}\\n\\n# Check to see if an incoming variable is different than whats stored in the ASO.\\n# Input: $name = name of variable\\n# Return: 1=value is different; 0=value not different OR not a redeploy\\nproc is_new_value { name } {\\n  if { $::newdeploy } {\\n    return 0\\n  }\\n  set varvalue [get_var $name]\\n  debug [list is_new_value] [format \\\"name=%s asovalue=%s varvalue=%s\\\" $name $varvalue [set [subst ::$name]]] 10\\n  if { [set [subst ::$name]] == $varvalue } {\\n    return 0\\n  }\\n  return 1\\n}\\n\\n# Get the variable value in the ASO.\\n# Input: $name = name of variable\\n#        $orig = return the original value, not the runtime updated one\\n# Return: $string = value of variable\\nproc get_var { name { orig 0 }} {\\n  if { $::newdeploy == 1} {\\n    return \\\"\\\"\\n  }\\n  debug [list get_var] [format \\\"start name=%s\\\" $name] 10\\n\\n  if { $orig == 0 && [info exists ::aso_config($name)] } {\\n    set varvalue $::aso_config($name)\\n    debug [list get_var] [format \\\"name=%s value=%s\\\" $name $varvalue] 10\\n    return $varvalue\\n  }\\n\\n  if { $orig == 1 && [info exists ::aso_config_orig($name)] } {\\n    set varvalue $::aso_config_orig($name)\\n    debug [list get_var original] [format \\\"name=%s value=%s\\\" $name $varvalue] 10\\n    return $varvalue\\n  }\\n  return \\\"\\\"\\n}\\n\\n# Safely handle the removal of a virtual server option on redeployment\\n# Input: $name = name of variable\\n#        $checkvalue = the string that disables the option\\n#        $option = TMSH name of the option\\n#        $module = the BIG-IP module that enables the option\\n# Return: 1=Option removed; 0=no action taken\\nproc handle_opt_remove_on_redeploy { name checkvalue option module } {\\n  if { ! $::redeploy || $::pool__addr eq \\\"255.255.255.254\\\" } {\\n    debug [list handle_opt_remove_on_redeploy $name] \\\"not a redeployment, skipping\\\" 10\\n    return 0\\n  }\\n\\n  if { ! [is_provisioned $module] } {\\n    debug [list handle_opt_remove_on_redeploy $name] [format \\\"%s not provisioned, skipping\\\" $module] 10\\n    return 0\\n  }\\n\\n  set vsname [get_var vs__Name 1]\\n  set vsobj [lindex [tmsh::get_config ltm virtual $::app_path/$vsname all-properties] 0]\\n  if { [is_valid_profile_option $vsobj $option] == 0 } {\\n    debug [list handle_opt_remove_on_redeploy $name] [format \\\"%s not available, skipping\\\" $option] 10\\n    return 0\\n  }\\n\\n  if { [set [subst ::$name]] == $checkvalue && \\\\\\n       [is_new_value $name] && \\\\\\n       $::redeploy } {\\n        debug [list handle_opt_remove_on_redeploy] [format \\\"%s %s on redeploy, setting %s to none\\\" $name $checkvalue $option] 10\\n        set cmd [format \\\"ltm virtual %s/%s %s none\\\" $::app_path $vsname $option]\\n        debug [list handle_opt_remove_on_redeploy tmsh_modify] $cmd 1\\n        tmsh::modify $cmd\\n        return 1\\n  }\\n  return 0\\n}\\n\\n# Check provisioning cache for whether a specified module is provisioned and at what levels\\n# Adapted from original code including the F5 iApp TCL helper library\\n# Input: $module = name of the module\\n# Output: $level = integer representation of the provisioning level.  See levels array below\\nproc is_provisioned { module } {\\n  array set levels {\\n    none      0\\n    minimum   1\\n    nominal   2\\n    dedicated 3\\n  }\\n\\n  if { [info exists ::__provision_cache($module)] } {\\n    debug [list is_provisioned cache_hit] \\\"$module $::__provision_cache($module)\\\" 10\\n    return [expr { $levels($::__provision_cache($module)) >= 1 }]\\n  } else {\\n    debug [list is_provisioned cache_miss] \\\"$module\\\" 10\\n    return -1\\n  }\\n}\\n\\n# Load provisioning cache with module provisioning levels\\n# Adapted from original code including the F5 iApp TCL helper library\\nproc load_provisioned { } {\\n  array set levels {\\n    none      0\\n    minimum   1\\n    nominal   2\\n    dedicated 3\\n  }\\n  set obj [tmsh::get_config sys provision]\\n  foreach mod $obj {\\n    set modname [lindex $mod 2]\\n    set modlevel [lindex $mod 3]\\n    if { [llength $modlevel] == 2 } {\\n      set modlevel [lindex $modlevel 1]\\n    } else {\\n      set modlevel none\\n    }\\n    set ::__provision_cache($modname) $modlevel\\n    debug [list load_provisioned cache_set] \\\"$modname $modlevel\\\" 10\\n  }\\n}\\n\\n# Consume an APL table and return a list containing the values of the var specified in $key\\n# Input: $table = the raw APL table\\n#        $key = the name of the variable to add to the return list\\n# Output: $retlist = A list of strings\\nproc single_column_table_to_list { table key } {\\n  set retlist {}\\n  foreach row $table {\\n    array unset column\\n\\n    # extract the iApp table data - borrowed from f5.lbaas.tmpl\\n    foreach column_data [lrange [split [join $row] \\\"\\\\n\\\"] 1 end-1] {\\n      set name [lindex $column_data 0]\\n      set column($name) [lrange $column_data 1 end]\\n    }\\n    if { [info exists column($key)] && [string length $column($key)] > 0 } {\\n      lappend retlist \\\"$column($key)\\\"\\n    }\\n\\n  }\\n  return $retlist\\n}\\n\\n# Process a string in the format <option>[=<value>][;<option2>[=<value2>]] and return a\\n# properly formatted TMSH string.  If $tmsh is specified than options will be verified\\n# using the object in $template.  This works for things like profiles, but not virtual\\n# servers.  Specifying no value for $tmsh turns off checking\\n# Input: $option_str = string to process\\n#        $tmsh = the portion of the tmsh command get a list of all-properties\\n#        $template = the object name to use as a list of available options\\n#        $add_default = add a 'defaults-from' option using the value of $template\\n#                       if not found in the string\\nproc process_options_string { option_str tmsh template {add_default 0} } {\\n  debug [list process_options_string] [format \\\"option_str=%s tmsh=%s template=%s add_default=%s\\\" $option_str $tmsh $template $add_default] 10\\n  set ret \\\"\\\"\\n\\n  # Get all the options passed in array format\\n  array set options [process_kvp_string $option_str]\\n\\n  if { $add_default && ![info exists options(defaults-from)] } {\\n    debug [list process_options_string add_default] \\\"defaults-from $template\\\" 10\\n    set options(defaults-from) $template\\n  }\\n\\n  # Get the supported options for a profile type\\n  foreach {option value} [array get options] {\\n    if { [string length $tmsh] > 0 } {\\n      set profileobj [lindex [tmsh::get_config ltm $tmsh $template all-properties] 0]\\n      if { [is_valid_profile_option $profileobj $option] == 0 } {\\n        error \\\"The option \\\\\\\"$option\\\\\\\" for $tmsh is not valid\\\"\\n      }\\n    }\\n\\n    # Handle options that have no value\\n    if { [string length $value] == 0 } {\\n      debug [list process_options_string $option] [format \\\"found empty value, appending option '%s' only\\\" $option] 10\\n      append ret [format \\\"%s \\\" $option]\\n      continue\\n    }\\n\\n    # Handle TMOS set value operations (add,delete,replace,default,none).  Input format for the value is:\\n    #   set_<operation>:item1[,item2]\\n    # Operations other than valid ones will fall through this logic to the default behaviour below\\n    set set_skip 0\\n    set set_raw 0\\n    if { [string match \\\"set_*\\\" $value] } {\\n      set set_cmd_prefix \\\"\\\"\\n      set set_cmd_postfix \\\" \\\\} \\\"\\n      switch -glob [string tolower $value] {\\n        set_add:* {\\n          set set_cmd_prefix \\\"add \\\\{ \\\"\\n        }\\n        set_delete:* {\\n          set set_cmd_prefix \\\"delete \\\\{ \\\"\\n        }\\n        set_replace:* {\\n          set set_cmd_prefix \\\"replace-all-with \\\\{ \\\"\\n        }\\n        set_raw:* {\\n          set set_cmd_prefix \\\"\\\"\\n          set set_cmd_postfix \\\"\\\"\\n          set set_raw 1\\n        }\\n        set_default {\\n          set set_cmd_prefix \\\"default \\\"\\n          set set_cmd_postfix \\\"\\\"\\n          set value \\\"\\\"\\n        }\\n        set_none {\\n          set set_cmd_prefix \\\"none \\\"\\n          set set_cmd_postfix \\\"\\\"\\n          set value \\\"\\\"\\n        }\\n        default {\\n          set set_skip 1\\n        }\\n      }\\n      debug [list process_options_string $option] [format \\\"found set_ value, prefix='%s' postfix='%s' skip=%s\\\" $set_cmd_prefix $set_cmd_postfix $set_skip] 10\\n\\n      if { !$set_skip } {\\n        set set_list [string map {, \\\" \\\"} [lindex [psplit $value ':'] 1]]\\n        debug [list process_options_string $option] [format \\\" set_list=%s\\\" $set_list] 10\\n        append ret [format \\\"%s %s %s %s\\\" $option $set_cmd_prefix $set_list $set_cmd_postfix]\\n        continue\\n      }\\n    }\\n\\n    # Handle the default behaviour\\n    debug [list process_options_string $option] [format \\\"dropped to default\\\"] 10\\n    if { $set_raw } {\\n      append ret [format \\\"%s %s \\\" $option $value]\\n    } else {\\n      append ret [format \\\"%s \\\\\\\"%s\\\\\\\" \\\" $option $value]\\n    }\\n  }\\n  array unset options\\n  debug [list process_options_string return] $ret 10\\n  return $ret\\n}\\n\\n# Split a string and return items matching a prefix in a TCL list\\n# Input: prefix = the prefix to match\\n#        string = the string to split\\n#        splitchar = the charecter to split on (DEFAULT is \\\" \\\")\\n#        strip = 1 value strips the prefix from the returned list\\n#                0 (DEFAULT) does nothing\\n# Return: retlist = a list of matching strings\\nproc get_items_starting_with { prefix string {splitchar \\\" \\\"} {strip 0}} {\\n  set parts [psplit $string $splitchar]\\n  debug [list get_items_starting_with start] \\\"prefix=$prefix string=$string splitchar=$splitchar strip=$strip\\\" 10\\n  set retlist []\\n  foreach part $parts {\\n    if { [string match $prefix* $part] } {\\n      if { $strip == 1 } {\\n        lappend retlist [string map [list $prefix \\\"\\\"] $part]\\n      } else {\\n        lappend retlist $part\\n      }\\n    }\\n  }\\n  debug [list get_items_starting_with retlist] $retlist 10\\n  return [string map [list \\\"\\\\\\\\?\\\" \\\"?\\\"] $retlist]\\n}\\n\\n# Properly escape a tmsh command string\\n# Input: string = the tmsh command\\n# Return: string = the modified string\\nproc create_escaped_tmsh { string } {\\n  return [string map [list \\\\{ \\\\\\\\\\\\{ \\\\} \\\\\\\\\\\\} \\\\\\\" \\\\\\\\\\\\\\\"] $string]\\n}\\n\\n# Set TMOS version info in a global array.  We read info from the /VERSION\\n# file and populate the array with that information.\\nproc set_version_info {} {\\n  global version_info\\n  array set version_info {}\\n  set fh [open \\\"/VERSION\\\" r]\\n  set file_data [read $fh]\\n  close $fh\\n  set data [split $file_data \\\"\\\\n\\\"]\\n  foreach line $data {\\n    set line_info [split $line \\\":\\\"]\\n    set ::version_info([string tolower [lindex $line_info 0]]) [string trim [lindex $line_info 1]]\\n  }\\n  return 1\\n}\\n\\n# Run the cURL command and save the URL to a file.  Throws a hard error if cURL\\n# exits uncleanly\\n# Input: string url = URL to fetch\\n#        string filename = filename to save output to\\n#        int error_exit = 1 => throw hard error on non 200 response code\\n#                         >1 => ignore error and return response code\\nproc curl_save_file { url filename {error_exit 1}} {\\n  debug [list curl_save_file start] \\\"url=$url filename=$filename error_exit=$error_exit\\\" 9\\n  set status [catch {\\n    exec curl --connect-timeout 5 -k -s -w 'RESPCODE=\\\\%\\\\{response_code\\\\}' -o $filename $url\\n  } message]\\n\\n  debug [list curl_save_file done] \\\"status=$status message=$message\\\" 9\\n\\n  if { ![string match \\\"*RESPCODE=200*\\\" $message] } {\\n    if { $error_exit == 1} {\\n      error \\\"Error occured while trying to retrieve $url: $message\\\"\\n    } else {\\n        return 0\\n    }\\n  }\\n\\n  return 1\\n}\\n\\n# Borrowed from tcllib ::ip::IPv4?\\n# Check a string to see if it's an IPv6 address\\n# Input: string addr = string to check\\n# Output: 1 = is IPv6\\n#         0 = not IPv6\\nproc is_ipv6 { addr } {\\n  if { [has_routedomain $addr] } {\\n    set addr [lindex [split $addr %] 0]\\n  }\\n  if {[string first : $addr] >= 0} {\\n      return 1\\n  }\\n  return 0\\n}\\n\\n# Borrowed from http://wiki.tcl.tk/989\\n# Check a string to see if it's an IPv4 address\\n# Input: string addr = string to check\\n# Output: 1 = is IPv4\\n#         0 = not IPv4\\nproc is_ipv4 { addr } {\\n  if { [has_routedomain $addr] } {\\n    set addr [lindex [split $addr %] 0]\\n  }\\n  if {[regexp {^\\\\d+\\\\.\\\\d+\\\\.\\\\d+\\\\.\\\\d+$} $addr]\\n      && [scan $addr %d.%d.%d.%d a b c d] == 4\\n      && 0 <= $a && $a <= 255 && 0 <= $b && $b <= 255\\n      && 0 <= $c && $c <= 255 && 0 <= $d && $d <= 255} {\\n    return 1\\n  } else {\\n    return 0\\n  }\\n}\\n\\n# Check a string to see if it's a IPv4 or IPv6 address\\n# Input: string addr = string to check\\n# Output: >1 = is address (4 = IPv4, 6 = IPv6)\\n#         0 = is NOT an address\\nproc is_ip { addr } {\\n  set v4 [is_ipv4 $addr]\\n  debug [list is_ip $addr v4] $v4 10\\n  if { $v4 } { return 4 }\\n  set v6 [is_ipv6 $addr]\\n  debug [list is_ip $addr v6] $v6 10\\n  if { $v6 } { return 6 }\\n  return 0\\n}\\n\\n# Return a route-domain aware destination address\\n# Input: string = addr to check/modify\\n# Return: string = the correctly formatted destination address\\nproc get_dest_addr { addr } {\\n  if { [is_ipv6 $addr] } {\\n    set addr [string map {[ \\\"\\\" ] \\\"\\\"} $addr]\\n  }\\n\\n  if { ![has_routedomain $addr]} {\\n    return [format \\\"%s%%%s\\\" $addr $::rd]\\n  } else {\\n    return $addr\\n  }\\n}\\n\\n# Return a IPv4/v6 route-domain aware destination string\\n# Input: string addr = The address to use\\n#        strint port = The port number\\n# Return: string = the correctly formatted destination string\\nproc get_dest_str { addr port } {\\n  if { [is_ipv6 $addr] } {\\n    set addr [string map {[ \\\"\\\" ] \\\"\\\"} $addr]\\n    if { ![has_routedomain $addr] } {\\n      return [format \\\"%s%%%s.%s\\\" $addr $::rd $port]\\n    } else {\\n      return [format \\\"%s.%s\\\" $addr $port]\\n    }\\n  }\\n\\n  if { ![has_routedomain $addr]} {\\n    return [format \\\"%s%%%s:%s\\\" $addr $::rd $port]\\n  } else {\\n    return [format \\\"%s:%s\\\" $addr $port]\\n  }\\n}\\n\\n# Convert a APL table row into an array keyed on the column name\\n# Input: list row = The APL TCL list object for the row\\n#        string arrayRef = The name of the existing array to populate\\n#        string defaultsRef = The name of the array to use for default values\\n#        list nullColumns = A list of column names that may contain the keyword\\n#                           'none'.  The value will be replaced with \\\"\\\" on return\\nproc table_row_to_array { row array_ref {defaults_ref {}} {null_columns []} } {\\n  debug [list table_row_to_array row] $row 10\\n  debug [list table_row_to_array array_ref] $array_ref 10\\n  debug [list table_row_to_array defaults_ref] $defaults_ref 10\\n  debug [list table_row_to_array null_columns] $null_columns 10\\n\\n  upvar $array_ref ret\\n  array set defaults [subst [subst $$defaults_ref]]\\n\\n  debug [list table_row_to_array default_vals] [array get defaults] 10\\n\\n  # extract the iApp table data - borrowed from f5.lbaas.tmpl\\n  foreach data [lrange [split [join $row] \\\"\\\\n\\\"] 1 end-1] {\\n      set name [lindex $data 0]\\n      set value [string map {\\\\n \\\\\\\\n \\\\r \\\\\\\\r} [lrange $data 1 end]]\\n      if { [lsearch $null_columns $name] > -1 && [string tolower $value] eq \\\"none\\\" } {\\n        set ret($name) \\\"\\\"\\n        debug [list table_row_to_array set_null] [format \\\"%s=%s\\\" $name $ret($name)] 10\\n      } else {\\n        set ret($name) $value\\n        debug [list table_row_to_array set_value] [format \\\"%s=%s\\\" $name $ret($name)] 10\\n      }\\n  }\\n\\n  # fill in any empty table values - borrowed from f5.lbaas.tmpl\\n  if { [array size defaults] } {\\n    foreach name [array names defaults] {\\n      if { ![info exists ret($name)] || $ret($name) eq \\\"\\\" } {\\n          set ret($name) $defaults($name)\\n          debug [list table_row_to_array set_default] [format \\\"%s=%s\\\" $name $ret($name)] 10\\n      }\\n    }\\n  }\\n  return\\n}\\n\\n# Check to see if a node object exists in the get_config.\\n# Lookups are cached in ::__node_cache for re-use\\n# Input:  string node_name = The object name to check for\\n# Return: 0 = node does not exist\\n#         1 = node does exist\\nproc check_node_exist { node_name } {\\n  if { ! [info exists ::__node_cache($node_name)] } {\\n    set node_status [catch {tmsh::get_config ltm node $node_name} node_status_ret]\\n    debug [list check_node_exist $node_name status] $node_status_ret 10\\n    if { [string match \\\"*address*\\\" $node_status_ret] } {\\n      set ::__node_cache($node_name) 1\\n      debug [list check_node_exist $node_name cache_set] \\\"1\\\" 10\\n      return 1\\n    } else {\\n      set ::__node_cache($node_name) 0\\n      debug [list check_node_exist $node_name cache_set] \\\"0\\\" 10\\n      return 0\\n    }\\n  } else {\\n    debug [list check_node_exist $node_name cache_hit] $::__node_cache($node_name) 10\\n    return $::__node_cache($node_name)\\n  }\\n}\\n\\n# Perform string substitution on a URL.\\n# Input: string url = the URL to manipulate\\n# Output: string url = the final URL\\nproc url_subst { url } {\\n  debug [list url_subst] [format \\\"url=%s\\\" $url] 10\\n  set url_map [list %APP_NAME%           $::app \\\\\\n                    %APP_PATH%           $::app_path \\\\\\n                    %PARTITION%          $::partition \\\\\\n                    %VS_NAME%            $::vs__Name \\\\\\n                    %VS_DESCR%           $::vs__Description \\\\\\n                    %EXT1%               $::extensions__Field1 \\\\\\n                    %EXT2%               $::extensions__Field2 \\\\\\n                    %EXT3%               $::extensions__Field2 \\\\\\n                    \\\"url=\\\"               \\\"\\\" \\\\\\n                    \\\"irule:url=\\\"         \\\"\\\" \\\\\\n                    \\\"irule:urloptional=\\\" \\\"\\\" \\\\\\n                    \\\"asm:url=\\\"           \\\"\\\" \\\\\\n                    \\\"apm:url=\\\"           \\\"\\\" ]\\n\\n  set url [string map $url_map $url]\\n  debug [list url_subst] [format \\\"return=%s\\\" $url] 10\\n  return $url\\n}\\n\\n# Load a crypto cert/key from URL\\n# Input: string type = key|cert\\n#        string url = the URL to get\\n# Return: string obj_name = the name of the created TMOS object\\nproc load_crypto_object { type url } {\\n  set url [url_subst $url]\\n  debug [list load_crypto_object url_subst] $url 10\\n\\n  set url_file_name [lindex [split $url /] end]\\n  set obj_name [format \\\"/%s/%s_%s\\\" $::partition $::app $url_file_name]\\n  set file_name [format \\\"/var/tmp/appsvcs_%s_%s_%s\\\" $::app $::bundler_timestamp $url_file_name]\\n  debug [list load_crypto_object] [format \\\"obj_name=%s file_name=%s\\\" $obj_name $file_name] 10\\n\\n  switch -glob $type {\\n    cert  { set verify_cmd [format \\\"/usr/bin/openssl x509 -noout -in %s\\\" $file_name] }\\n    key { set verify_cmd [format \\\"/usr/bin/openssl rsa -noout -in %s\\\" $file_name] }\\n    default { error \\\"The crypto type specified is not supported\\\" }\\n  }\\n\\n  curl_save_file $url $file_name\\n\\n  set verify_status [catch {eval exec $verify_cmd} verify_status_ret]\\n  debug [list load_crypto_object verify_status $verify_status] $verify_status_ret 10\\n\\n  if { $verify_status } {\\n    file delete $file_name\\n    error \\\"While loading the $type: $verify_status_ret\\\"\\n  }\\n\\n  set cmd [format \\\"sys file ssl-%s %s source-path file://%s\\\" $type $obj_name $file_name]\\n  debug [list load_crypto_object tmsh_create] $cmd 10\\n  set create_status [catch {tmsh::create $cmd} create_status_ret]\\n  debug [list load_crypto_object create_status $create_status] $create_status_ret 10\\n  file delete $file_name\\n\\n  return $obj_name\\n}\\n\\n# Credit: http://www.egghelp.org/cgi-bin/tcl_archive.tcl?mode=download&id=97\\n# Perform a DNS lookup of a hostname using nslookup.  Assumes DNS servers are already\\n# configured in TMOS\\n# Input: string host = name of host to lookup\\n#        int mode = 1 => Throw a hard error\\n#                    0 => Return the error\\n# Return: string return = First IP tied to hostname OR Error\\nproc dns_lookup { host {mode 1} } {\\n  set name \\\"Unknown\\\"\\n  set ip \\\"Unknown\\\"\\n  set errmsg \\\"Unknown\\\"\\n  set host [lindex [string tolower $host] 0]\\n  if {[catch {eval exec \\\"/usr/bin/nslookup\\\" [lindex $host 0]} buff]} {\\n    foreach line [split $buff \\\\n] {\\n      if {[string first \\\"${host}:\\\" $line] != -1} {\\n        set errmsg [string trim [lindex [split $line :] 1]]\\n      }\\n    }\\n\\n    if { $mode } {\\n        error \\\"An error occured trying to resolve $host: $errmsg\\\"\\n    } else {\\n        return \\\"Error: $errmsg\\\"\\n    }\\n  }\\n  set buff [split $buff \\\\n]\\n  set buff [lreplace $buff 0 1]\\n  if {[regexp {name = (.*)\\\\.} $buff -> name]} { set ip $host }\\n\\n  foreach data $buff {\\n    switch [lindex $data 0] {\\n      \\\"Name:\\\" {\\n        set name [string trim [lindex [split $data :] 1]]\\n      }\\n      \\\"Address:\\\" {\\n        set ip [string trim [lindex [split $data :] 1]]\\n      }\\n      \\\"Addresses:\\\" {\\n        set ip [string trim [lindex [split $data :] 1]]\\n      }\\n    }\\n  }\\n  return \\\"${ip}\\\"\\n}\\n\\nset_version_info\\n\\n# Copyright (c) 2017 F5 Networks, Inc.\\n#\\n# Licensed under the Apache License, Version 2.0 (the \\\"License\\\");\\n# you may not use this file except in compliance with the License.\\n# You may obtain a copy of the License at\\n#\\n#     http://www.apache.org/licenses/LICENSE-2.0\\n#\\n#     Unless required by applicable law or agreed to in writing, software\\n#     distributed under the License is distributed on an \\\"AS IS\\\" BASIS,\\n#     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\\n#     See the License for the specific language governing permissions and\\n#     limitations under the License.\\n#\\n# ####################################################################\\n# Custom extensions example\\n#\\n# The purpose of custom extensions is to allow functionality to be implemented\\n# without modifying the base deployment code.  Additionally control over these\\n# extensions can be exposed via the extensions__fieldX fields to allow functionality\\n# to be added WITHOUT changes to the presentation layer. By exposing the extension\\n# fields as tenant editable we can add code to this portion of the iApp to handle\\n# new functionality without changing the northbound data model\\n#\\n# The following procs are called at various points during the implementation:\\n#   custom_extensions_start: Called at the start of the deployment after mode is determined\\n#   custom_extensions_before_pools:  Called before processing all pool(s) starts\\n#   custom_extensions_before_pool:  Called before processing to create the pool starts\\n#   custom_extensions_after_pool: Called immediately after the pool is created\\n#   custom_extensions_after_pools: Called immediately after all pool(s) are created\\n#   custom_extensions_before_vs:  Called before processing to create the virtual server starts\\n#   custom_extensions_after_vs: Called immediately after the virtual server is created\\n#   custom_extentions_end: Called at the end of the deployment\\n#\\n# Guidelines:\\n#  - Avoid name collisions please prefix variables with 'custom_' unless used by the base deployment code\\n#  - Restrict modifications to global presentation layer variables unless absolutely required\\n#  - Try to modify the config once created by the base deployment code to maintain compatibility\\n#\\n# Two examples are implemented here:\\n#  - custom_example_1: Called from all hooks to dump some info to the debug log\\n#  - custom_example_2: (Disabled by default) Called at the end of the deployment to execute\\n#                      a tmsh::create command\\n\\nproc custom_extensions_start {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Example 1: Parse a string of the format \\\"key1=val1;key2=val2;key3=val3\\\" and populate an array.\\n  # The we call the custom_example proc to dump some info to the /var/tmp/scriptd.out log\\n\\n  # Make the global variable accessable locally.  Additionally create a global array to store KVP pairs\\n  upvar extensions__Field1 field1\\n  upvar custom_field1_kvp kvp_array\\n\\n  # Check to see we got some data in extensions__Field1\\n  if { [string length $field1] > 0 } {\\n    # Use the process_kvp_string proc to populate an array\\n    array set kvp_array [process_kvp_string $field1]\\n\\n    debug \\\"[lindex [info level 0] 0]\\\" \\\"kvp_array=[array get kvp_array]\\\" 0\\n    # Call our custom_example_1 proc to dump some info to the debug log.\\n    custom_example_1 [array get kvp_array]\\n  }\\n}\\n\\nproc custom_extensions_before_pools {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_before_pool {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_after_pool {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_after_pools {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_before_vs {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_after_vs {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n}\\n\\nproc custom_extensions_end {} {\\n  debug \\\"[lindex [info level 0] 0]\\\" \\\"entering proc\\\" 6\\n\\n  # Call our custom_example_1 proc to dump some info to the debug log.\\n  upvar custom_field1_kvp kvp_array\\n  custom_example_1 [array get kvp_array]\\n\\n  # Call our custom_example_2 proc to run a user provided tmsh create command\\n  #\\n  # Populate extensions__Field2 with a valid command like:\\n  #  ltm data-group internal customDG type string records replace-all-with { record1 { data data1 } record2 { data data2 } }\\n  #\\n  # Once the template executes you can see the creation of the datagroup under the application template container\\n\\n  # ** To enable example 2 uncomment the following two lines **\\n  # upvar extensions__Field2 field2\\n  # custom_example_2 $field2\\n}\\n\\n# Example 1: Simply dump a log line to /var/tmp/scriptd.out\\nproc custom_example_1 { kvp_array_in } {\\n  set calling_proc [lindex [info level -1] 0]\\n  set current_proc [lindex [info level 0] 0]\\n  array set kvp_array $kvp_array_in\\n\\n  debug [list $current_proc] \\\"entering proc kvp_array_in=$kvp_array_in\\\" 6\\n\\n  if { [info exists kvp_array(custom_example)] && $kvp_array(custom_example) == 1} {\\n   debug [list $current_proc] \\\"This is an example of a custom extension called from $calling_proc\\\" 6\\n  }\\n}\\n\\n# Example 2: Run the text in extensions__Field2 as a tmsh create command\\nproc custom_example_2 { cmd } {\\n  set calling_proc [lindex [info level -1] 0]\\n  set current_proc [lindex [info level 0] 0]\\n\\n  debug [list $current_proc] \\\"entering proc cmd=$cmd\\\" 6\\n\\n  if { [string length $cmd] > 0 } {\\n    debug [list $current_proc] \\\"Called from $calling_proc - About the execute tmsh::create $cmd\\\" 6\\n    tmsh::create $cmd\\n  }\\n}\\n\\narray set bundler_objects {}\\narray set bundler_data {}\\nset bundler_deferred_cmds []\\n\\n\\n\\nset app $tmsh::app_name\\ndebug [list start] [format \\\"Starting %s version IMPL=%s TMPLNAME=%s app_name=%s\\\" $NAME $IMPLVERSION $TMPLNAME $app] 0\\ndebug [list version_info] [array get version_info] 3\\n\\narray set modenames {\\n  1 {Standalone}\\n  2 {iWorkflow}\\n  3 {Cisco APIC}\\n  4 {VMware NSX}\\n}\\n\\narray set __provision_cache {}\\narray set __node_cache {}\\nload_provisioned\\n\\narray set aso_config {}\\nset asoobj {}\\nset modeinfo [get_mode]\\nset mode [lindex $modeinfo 0]\\nset folder [lindex $modeinfo 1]\\nset partition [lindex $modeinfo 2]\\nset rd [lindex $modeinfo 3]\\nset newdeploy [lindex $modeinfo 4]\\nset app_path [format \\\"/%s/%s.app\\\" $partition $app]\\nset template_name [format \\\"appsvcs_integration_v%s\\\" $IMPLMAJORVERSION]\\nset aso [format \\\"%s/%s\\\" $app_path $app]\\nset redeploy 0\\nif { ! $newdeploy } { set redeploy 1 }\\nset postfinal_deferred_cmds []\\n\\ndebug \\\"modeinfo\\\" [format \\\"mode=%s folder=%s partition=%s rd=%s newdeploy=%s redeploy=%s template_name=%s\\\" $mode $folder $partition $rd $newdeploy $redeploy $template_name] 2\\n\\n# Cache our ASO object data\\nfor { set i 0 } { $i <= [llength $asoobj] } { set i [expr {$i+2}] } {\\n  set type [lindex $asoobj $i]\\n  if { $type == \\\"variables\\\" || $type == \\\"lists\\\" || $type == \\\"tables\\\" } {\\n    for { set j 0 } { $j < [llength [lindex $asoobj [expr {$i+1}]]] } { set j [expr {$j+2}] } {\\n      set name [lindex [lindex $asoobj [expr {$i+1}]] $j]\\n\\n      if { $type == \\\"tables\\\" } {\\n        set val [lindex [lindex $asoobj [expr {$i+1}]] [expr {$j+1}]]\\n      } elseif { $type == \\\"lists\\\" } {\\n        set val [lindex [lindex [lindex $asoobj [expr {$i+1}]] [expr {$j+1}]] 1]\\n      } else {\\n        set val [lindex [lindex [lindex $asoobj [expr {$i+1}]] [expr {$j+1}]] 1]\\n      }\\n      set aso_config($name) $val\\n    }\\n  }\\n}\\n# Copy the array so that we can preserve the original values\\n# aso_config() can change at runtime\\narray set aso_config_orig [array get aso_config]\\n\\ndebug [list aso_config] [array names aso_config] 9\\nforeach var [array names aso_config] {\\n  debug [list aso_config $var] $aso_config($var) 9\\n}\\n\\nset asodescr [format \\\"Deployed by appsvcs_integration_v%s in %s mode on %s\\\" $IMPLVERSION $modenames($mode) [clock format $startTime -format \\\"%D %H:%M:%S\\\"]]\\ndebug [list set_aso_decription tmsh_modify] [format \\\"sys application service %s description \\\\\\\"%s\\\\\\\"\\\" $aso $asodescr] 1\\ntmsh::modify [format \\\"sys application service %s description \\\\\\\"%s\\\\\\\"\\\" $aso $asodescr]\\n\\n# Define various global values\\nset allVars {\\n iapp__strictUpdates \\\\\\n iapp__appStats \\\\\\n iapp__mode \\\\\\n iapp__logLevel \\\\\\n iapp__routeDomain \\\\\\n iapp__asmDeployMode \\\\\\n iapp__apmDeployMode \\\\\\n pool__addr \\\\\\n pool__mask \\\\\\n pool__port \\\\\\n pool__DefaultPoolIndex \\\\\\n pool__Pools \\\\\\n pool__MemberDefaultPort \\\\\\n pool__Members \\\\\\n monitor__Monitors \\\\\\n vs__Listeners \\\\\\n vs__Name \\\\\\n vs__Description \\\\\\n vs__RouteAdv \\\\\\n vs__SourceAddress \\\\\\n vs__IpProtocol \\\\\\n vs__ConnectionLimit \\\\\\n vs__ProfileClientProtocol \\\\\\n vs__ProfileServerProtocol \\\\\\n vs__ProfileHTTP \\\\\\n vs__ProfileOneConnect \\\\\\n vs__ProfileCompression \\\\\\n vs__ProfileAnalytics \\\\\\n vs__ProfileRequestLogging \\\\\\n vs__ProfileDefaultPersist \\\\\\n vs__ProfileFallbackPersist \\\\\\n vs__SNATConfig \\\\\\n vs__ProfileServerSSL \\\\\\n vs__ProfileClientSSL \\\\\\n vs__ProfileClientSSLCert \\\\\\n vs__ProfileClientSSLKey \\\\\\n vs__ProfileClientSSLChain \\\\\\n vs__ProfileClientSSLCipherString \\\\\\n vs__ProfileClientSSLAdvOptions \\\\\\n vs__ProfileSecurityLogProfiles \\\\\\n vs__ProfileSecurityIPBlacklist \\\\\\n vs__ProfileSecurityDoS \\\\\\n vs__ProfileAccess \\\\\\n vs__ProfileConnectivity \\\\\\n vs__ProfilePerRequest \\\\\\n vs__OptionSourcePort \\\\\\n vs__OptionConnectionMirroring \\\\\\n vs__Irules \\\\\\n vs__BundledItems \\\\\\n vs__AdvOptions \\\\\\n vs__AdvProfiles \\\\\\n vs__AdvPolicies \\\\\\n vs__VirtualAddrAdvOptions \\\\\\n l7policy__strategy \\\\\\n l7policy__defaultASM \\\\\\n l7policy__defaultL7DOS \\\\\\n l7policy__rulesMatch \\\\\\n l7policy__rulesAction \\\\\\n feature__statsTLS \\\\\\n feature__statsHTTP \\\\\\n feature__insertXForwardedFor \\\\\\n feature__redirectToHTTPS \\\\\\n feature__sslEasyCipher \\\\\\n feature__securityEnableHSTS \\\\\\n feature__easyL4Firewall \\\\\\n feature__easyL4FirewallBlacklist \\\\\\n feature__easyL4FirewallSourceList \\\\\\n extensions__Field1 \\\\\\n extensions__Field2 \\\\\\n extensions__Field3 \\\\\\n app_stats }\\n\\nset requiredVars {\\n pool__addr \\\\\\n pool__mask \\\\\\n pool__port \\\\\\n vs__ProfileClientProtocol }\\n\\narray set table_defaults {\\n    Members {\\n        Index 0\\n        State enabled\\n        IPAddress \\\"\\\"\\n        Port \\\"\\\"\\n        ConnectionLimit 0\\n        Ratio 1\\n        PriorityGroup 0\\n        AdvOptions \\\"\\\"\\n    }\\n    Pools {\\n      Index -1\\n      Name \\\"\\\"\\n      Description \\\"\\\"\\n      LbMethod \\\"\\\"\\n      Monitor \\\"\\\"\\n      AdvOptions \\\"\\\"\\n    }\\n    Monitors {\\n      Index -1\\n      Name \\\"\\\"\\n      Type \\\"\\\"\\n      Options \\\"\\\"\\n    }\\n    L7P_Match {\\n      Group -1\\n      Operand \\\"\\\"\\n      Negate no\\n      Condition \\\"\\\"\\n      CaseSensitive no\\n      Value \\\"\\\"\\n      Missing no\\n    }\\n    L7P_Action {\\n      Group -1\\n      Target error/error/error\\n      Parameter error\\n    }\\n    Listeners {\\n      Listener \\\"\\\"\\n      Destination \\\"\\\"\\n    }\\n}\\n\\narray set pool_member_state {\\n    enabled        {session user-enabled state user-up}\\n    disabled       {session user-disabled state user-up}\\n    force-disabled {session user-disabled state user-down}\\n    drain-disabled {session user-disabled state user-up}\\n}\\n\\n# Fixup incoming variables: If no value is sent for a particular iApp field than the var is not created which\\n# results in all sorts of problems.  We just check for existence of the var and set to \\\"\\\" if it doesn't exist\\nforeach var $allVars {\\n  if {[info exists [subst $var]]} {\\n    debug \\\"input\\\" [format \\\"%s sent, value is: %s\\\" $var [set [subst $var]]] 2\\n  } else {\\n    set [subst $var] \\\"\\\"\\n    debug \\\"input\\\" [format \\\"%s NOT sent, setting to blank\\\" $var] 2\\n  }\\n}\\n\\n# Double check we got all the required variables.\\nforeach var $requiredVars {\\n  debug [list required_check] [format \\\"var=%s val=%s len=%s\\\" $var [set [subst $var]] [string length [set [subst $var]]]] 10\\n  if {! [info exists [subst $var]] || [string length [set [subst $var]]] == 0 } {\\n    if { ! [string match \\\"vs__\\\" $var] && $pool__addr != \\\"255.255.255.254\\\" } {\\n      error \\\"The variable $var is required\\\"\\n    }\\n  }\\n}\\n\\n# Convert the $vs__BundledItems table to a list for easier manipulation\\nset vs__BundledItems [single_column_table_to_list $vs__BundledItems \\\"Resource\\\"]\\ndebug [list convert_bundled] $vs__BundledItems 7\\n\\n# Call the custom_extensions_start proc to allow site-specific customizations\\ncustom_extensions_start\\n\\n# Special handling for the Source Address because it comes in as 0.0.0.0/0 and\\n# needs to be 0.0.0.0%xxxx/0, where '%xxxx' is the route-domain ID\\nset working $vs__SourceAddress\\ndebug [list fix_src_addr] \\\"Check if vs__SourceAddress needs to be fixed\\\" 7\\nif { [string length $working] > 0 } {\\n  set net  [lindex [split $working /] 0]\\n  set cidr [lindex [split $working /] 1]\\n  set vs__SourceAddress \\\"$net%$rd\\\\/$cidr\\\"\\n  debug [list fix_src_addr] [format \\\" Fixing vs__SourceAddress: orig=%s new=%s\\\" $working $vs__SourceAddress] 7\\n}\\n\\n# Create Client-SSL profile if Cert and Key are specified but ClientSSLProfile is not\\ndebug [list client_ssl create] \\\"checking if client ssl cert & key were entered\\\" 7\\nset clientssl 0\\nif { [string length $vs__ProfileClientSSLKey] > 0 && [string length $vs__ProfileClientSSLCert] > 0 && [string length $vs__ProfileClientSSL] == 0 } {\\n\\n  set crypto_url_found 0\\n  if { [string match \\\"url=*\\\" $vs__ProfileClientSSLKey] } {\\n    set vs__ProfileClientSSLKey [load_crypto_object \\\"key\\\" $vs__ProfileClientSSLKey]\\n    set crypto_url_found 1\\n  }\\n\\n  if { [string match \\\"url=*\\\" $vs__ProfileClientSSLCert] } {\\n    set vs__ProfileClientSSLCert [load_crypto_object \\\"cert\\\" $vs__ProfileClientSSLCert]\\n    set crypto_url_found 1\\n  }\\n\\n  if { [string match \\\"url=*\\\" $vs__ProfileClientSSLChain] } {\\n    set vs__ProfileClientSSLChain [load_crypto_object \\\"cert\\\" $vs__ProfileClientSSLChain]\\n    set crypto_url_found 1\\n  }\\n\\n  if { $vs__ProfileClientSSLKey == \\\"auto\\\" } {\\n    debug [list client_ssl create auto_key] [format \\\"found auto option for key, setting vs__ProfileClientSSLKey=/Common/%s.key\\\" $app] 5\\n    set vs__ProfileClientSSLKey \\\"/Common/$app.key\\\"\\n  }\\n\\n  if { $vs__ProfileClientSSLCert == \\\"auto\\\" } {\\n    debug [list client_ssl create auto_cert] [format \\\"found auto option for key, setting vs__ProfileClientSSLCert=/Common/%s.crt\\\" $app] 5\\n    set vs__ProfileClientSSLCert \\\"/Common/$app.crt\\\"\\n  }\\n\\n  if { $crypto_url_found == 0 } {\\n    tmsh::get_config /sys file ssl-key $vs__ProfileClientSSLKey\\n    tmsh::get_config /sys file ssl-cert $vs__ProfileClientSSLCert\\n    debug [list client_ssl create check_exist] \\\"ssl cert & key found... creating profile\\\" 7\\n  }\\n\\n  set cmd [format \\\"ltm profile client-ssl %s_clientssl key %s cert %s\\\" $app $vs__ProfileClientSSLKey $vs__ProfileClientSSLCert]\\n\\n  if { [string length $vs__ProfileClientSSLChain] > 0 } {\\n      if { $crypto_url_found == 0 } {\\n        tmsh::get_config /sys file ssl-cert $vs__ProfileClientSSLChain\\n      }\\n      debug [list client_ssl create cert_chain] \\\"adding cert chain\\\" 7\\n      append cmd [format \\\" chain %s\\\" $vs__ProfileClientSSLChain]\\n  }\\n\\n\\tarray set feature_sslEasyCipher_strings {\\n\\t\\tcompatible {NATIVE:!SSLv3:!SSLv2:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t\\tmedium {TLSv1_2+HIGH:TLSv1_1+HIGH:TLSv1+MEDIUM:TLSv1+HIGH:!EXPORT:!RC4:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t\\thigh {TLSv1_2+HIGH:TLSv1_1+HIGH:TLSv1+MEDIUM:TLSv1+HIGH:!RC4:!RSA:!DHE:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t\\ttls_1.2 {TLSv1_2:!TLSv1_2+LOW:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t\\ttls_1.1+1.2 {TLSv1_2:TLSv1_1:!TLSv1_2+LOW:!TLSv1_1+LOW:!EXPORT:!MD5:!ADH:@STRENGTH}\\n\\t}\\n\\n\\tif { $feature__sslEasyCipher ne \\\"disabled\\\" && [info exists feature_sslEasyCipher_strings($feature__sslEasyCipher)]} {\\n\\t\\tdebug [list client_ssl create ssl_easy_cipher] [format \\\"sslEasyCipher is not disabled, setting vs__ProfileClientSSLCipherString=%s\\\" $feature_sslEasyCipher_strings($feature__sslEasyCipher)] 5\\n\\t\\tset vs__ProfileClientSSLCipherString $feature_sslEasyCipher_strings($feature__sslEasyCipher)\\n\\t}\\n\\n  if { [string length $vs__ProfileClientSSLCipherString] > 0 } {\\n      debug [list client_ssl create cipher_string] \\\"adding cipher string\\\" 7\\n      append cmd [format \\\" ciphers \\\\\\\"%s\\\\\\\"\\\" $vs__ProfileClientSSLCipherString]\\n  }\\n\\n  if { [string length $vs__ProfileClientSSLAdvOptions] > 0 } {\\n    debug [list client_ssl create adv_options] \\\"processing advanced options string\\\" 7\\n    append cmd [format \\\" %s\\\" [process_options_string $vs__ProfileClientSSLAdvOptions \\\"profile client-ssl\\\" \\\"/Common/clientssl\\\"]]\\n  }\\n\\n  debug [list client_ssl create tmsh_create] $cmd 1\\n  tmsh::create $cmd\\n  set clientssl 1\\n} else {\\n  if { [string length $vs__ProfileClientSSL] > 0 } {\\n    if { ![string match \\\"create:*\\\" $vs__ProfileClientSSL] } {\\n      debug [list client_ssl associate] \\\"ClientSSLProfile was provided... checking if it exists\\\" 5\\n      tmsh::get_config /ltm profile client-ssl $vs__ProfileClientSSL\\n      set clientssl 2\\n    } else {\\n      debug [list client_ssl create] \\\"create ClientSSLProfile was provided...\\\" 5\\n      set clientssl 3\\n    }\\n  } else {\\n    set clientssl 0\\n    if { [string length $vs__ProfileClientSSLKey] > 0 && [string length $vs__ProfileClientSSLCert] == 0 } {\\n      error \\\"A client-ssl key was specified without a client-ssl certifcate\\\"\\n    }\\n    if { [string length $vs__ProfileClientSSLKey] == 0 && [string length $vs__ProfileClientSSLCert] > 0 } {\\n      error \\\"A client-ssl certifcate was specified without a client-ssl key\\\"\\n    }\\n    debug [list client_ssl] \\\"ssl cert & key not specified... skipped Client-SSL profile creation\\\" 2\\n  }\\n}\\n\\n# Fixup empty pool__Pools and monitor__Monitors table if pool__Members is populated\\n# The behaviour implemented here will create a pool with a round-robin lb-method\\n#\\n# If a monitor with Index 0 is present in the monitor__Monitors table\\n# the pool monitor will be set to that.\\n#\\n# If the monitor__Monitors is empty a default monitor will be created\\nset monCount [llength $monitor__Monitors]\\nset poolCount [llength $pool__Pools]\\nset poolMemberCount [llength $pool__Members]\\n\\nset poolTmpl {{{\\n    AdvOptions none\\n    Description\\n    Index %INDEX%\\n    LbMethod round-robin\\n    Monitor %MONITOR%\\n    Name\\n}} }\\n\\nset monitorTmpl {{{\\n  Index 0\\n  Name %NAME%\\n  Type\\n  Options\\n}} }\\n\\nif { $poolCount == 0 && $poolMemberCount > 0 } {\\n  debug [list pools_fixup] [format \\\"poolCount=%s\\\" $poolCount] 7\\n  debug [list pools_fixup] [format \\\"monCount=%s\\\" $monCount] 7\\n  debug [list pools_fixup] [format \\\"poolMemberCount=%s\\\" $poolMemberCount] 7\\n  set poolFixupIndexes []\\n  array set poolFixupFound {}\\n  foreach memberRow $pool__Members {\\n    array unset memberColumn\\n    array set memberColumn {}\\n    table_row_to_array $memberRow memberColumn ::table_defaults(Members) [list AdvOptions]\\n    if { ![info exists poolFixupFound($memberColumn(Index))] } {\\n      debug [list pools_fixup found_pool] [format \\\"index=%s\\\" $memberColumn(Index)] 7\\n      lappend poolFixupIndexes $memberColumn(Index)\\n      set poolFixupFound($memberColumn(Index)) 1\\n    }\\n  }\\n  debug [list pools_fixup create_indexes] $poolFixupIndexes 7\\n\\n  set poolFixupMonitor \\\"0\\\"\\n  if { $monCount == 0 } {\\n    if { $vs__IpProtocol == \\\"tcp\\\" } {\\n      if { [string length $vs__ProfileHTTP] > 0 } {\\n        set monFixupName \\\"/Common/http\\\"\\n      } else {\\n        set monFixupName \\\"/Common/tcp\\\"\\n      }\\n      set monTmpl_map [list %NAME% $monFixupName]\\n      set monitor__Monitors [string map $monTmpl_map $monitorTmpl]\\n      debug [list pools_fixup monitor__Monitors] $monitor__Monitors 7\\n    } else {\\n      set poolFixupMonitor \\\"\\\"\\n    }\\n  }\\n\\n  set poolTemp \\\"\\\"\\n  foreach foundIndex $poolFixupIndexes {\\n    set poolTmpl_map [list %INDEX% $foundIndex \\\\\\n                           %MONITOR% $poolFixupMonitor ]\\n    append poolTemp [string map $poolTmpl_map $poolTmpl]\\n  }\\n  set pool__Pools $poolTemp\\n  debug [list pools_fixup pool__Pools] $pool__Pools 7\\n\\n  set monCount [llength $monitor__Monitors]\\n  set poolCount [llength $pool__Pools]\\n}\\n\\n# Create Monitors\\ndebug [list monitors] [format \\\"monCount=%s\\\" $monCount] 7\\nset monIdx 0\\narray set monNames {}\\narray set monCreate {}\\nforeach monRow $monitor__Monitors {\\n  set cmd \\\"\\\"\\n  debug [list monitors $monIdx] [format \\\"monRow=%s\\\" $monRow] 9\\n\\n  array unset monColumn\\n  array set monColumn {}\\n  table_row_to_array $monRow monColumn ::table_defaults(Monitors)\\n  debug [list monitors table_row_to_array return] [array get monColumn] 7\\n\\n  # Fixup the Index in case a table with exactly one row and no Index is sent\\n  if { [llength $monitor__Monitors] == 1 && $monColumn(Index) == -1 } {\\n    debug [list monitors fixup_index] \\\"setting Index to 0\\\" 9\\n    set monColumn(Index) 0\\n  }\\n\\n  # The BIG-IP UI sends empty rows... above this we set Index to -1 if it wasn't found\\n  # If a Index is not specified then skip this row in the table\\n  if { $monColumn(Index) < 0 } {\\n    debug [list monitors $monIdx check_index] \\\"no index value found, skipping row\\\" 9\\n    continue\\n  } elseif { [info exists monNames($monColumn(Index))] } {\\n    error \\\"A monitor with Index of \\\\\\\"$monColumn(Index)\\\\\\\" was already specified\\\"\\n  } else {\\n    if {[string length $monColumn(Name)] > 0 } {\\n      if { [string match \\\"/*\\\" $monColumn(Name)] } {\\n        set monNames($monColumn(Index)) $monColumn(Name)\\n        set monCreate($monColumn(Index)) 0\\n      } else {\\n        set monNames($monColumn(Index)) [format \\\"%s/%s\\\" $app_path $monColumn(Name)]\\n        set monCreate($monColumn(Index)) 1\\n      }\\n    } else {\\n      set monNames($monColumn(Index)) [format \\\"%s/monitor_%s\\\" $app_path $monColumn(Index)]\\n      set monCreate($monColumn(Index)) 1\\n    }\\n  }\\n\\n  if { $monCreate($monColumn(Index)) == 1 } {\\n    if { [string length $monColumn(Type)] <= 0 } {\\n      error \\\"A Monitor Type was not specified for monitor with Index $monColumn(Index)\\\"\\n    }\\n\\n    set cmd [format \\\"ltm monitor %s %s \\\" $monColumn(Type) $monNames($monIdx)]\\n    if { [string length $monColumn(Options)] > 0 } {\\n      set monColumn(Options) [join $monColumn(Options) \\\" \\\"]\\n      debug [list monitors $monIdx options] [format \\\"processing options string \\\\\\\"%s\\\\\\\"\\\" $monColumn(Options)] 10\\n      append cmd [format \\\" %s\\\" [process_options_string $monColumn(Options) \\\"\\\" \\\"\\\"]]\\n    }\\n\\n    debug [list monitors $monIdx tmsh_create] $cmd 1\\n    tmsh::create $cmd\\n  }\\n\\n  incr monIdx\\n}\\n\\n# Call the custom_extensions_before_pool proc to allow site-specific customizations\\ncustom_extensions_before_pools\\n\\n# Create pool\\ndebug [list pools] [format \\\"poolCount=%s\\\" $poolCount] 7\\n\\nset poolIdx 0\\nset default_pool_name \\\"\\\"\\narray set poolIndexes {}\\narray set poolNames {}\\nforeach poolRow $pool__Pools {\\n  set cmd \\\"\\\"\\n  set numMembers 0\\n\\n  debug [list pools $poolIdx] [format \\\"poolRow=%s\\\" $poolRow] 9\\n\\n  custom_extensions_before_pool\\n\\n  array unset poolColumn\\n  array set poolColumn {}\\n  table_row_to_array $poolRow poolColumn ::table_defaults(Pools) [list AdvOptions]\\n  debug [list pools $poolIdx table_row_to_array return] [array get poolColumn] 7\\n\\n  # Fixup the Index in case a table with exactly one row and no Index is sent\\n  if { [llength $pool__Pools] == 1 && $poolColumn(Index) == -1 } {\\n    debug [list pools $poolIdx fixup_index] \\\"setting Index to 0\\\" 9\\n    set poolColumn(Index) 0\\n  }\\n\\n  # The BIG-IP UI sends empty rows... above this we set Index to -1 if it wasn't found\\n  # If a Index is not specified then skip this row in the table\\n  if { $poolColumn(Index) < 0 } {\\n    debug [list pools $poolIdx] \\\"no index value found, skipping row\\\" 9\\n    continue\\n  } elseif { [info exists poolIndexes($poolColumn(Index))] } {\\n    error \\\"A pool with Index of \\\\\\\"$poolColumn(Index)\\\\\\\" was already specified\\\"\\n  } else {\\n    set poolIndexes($poolColumn(Index)) 1\\n  }\\n\\n  # Check to see if a poolName was specified... if not set to $app_pool_$poolColumn(Index)\\n  if { [string length $poolColumn(Name)] == 0 } {\\n      set poolColumn(Name) [format \\\"%s_pool_%s\\\" $app $poolColumn(Index)]\\n      debug [list pools $poolIdx] [format \\\"no pool name specified... setting to %s\\\" $poolColumn(Name)] 7\\n  }\\n  set poolNames($poolColumn(Index)) $poolColumn(Name)\\n\\n  if { $poolColumn(Index) == $pool__DefaultPoolIndex } {\\n    # Set the default pool name for use later during virtual server creation\\n    set default_pool_name $poolColumn(Name)\\n  }\\n\\n  # Process the pool__Members table\\n  set memberStr \\\"members replace-all-with \\\\{ \\\"\\n  foreach memberRow $pool__Members {\\n    array unset memberColumn\\n    array set memberColumn {}\\n    table_row_to_array $memberRow memberColumn ::table_defaults(Members) [list AdvOptions]\\n\\n    set memberId [format \\\"%s/%s:%s\\\" $memberColumn(Index) $memberColumn(IPAddress) $memberColumn(Port)]\\n\\n    if { [llength $pool__Pools] == 1 &&  $memberColumn(Index) == -1 } {\\n      set memberColumn(Index) 0\\n    }\\n\\n    if { $memberColumn(Index) != $poolColumn(Index) } {\\n      debug [list pools $poolIdx members $memberId skip_index] [format \\\"not a member of pool %s skipping\\\" $poolColumn(Index)] 11\\n      continue\\n    }\\n\\n    debug [list pools $poolIdx members $memberId config_raw] [array get memberColumn] 9\\n\\n\\n    set memberColumn(AdvOptions) [lindex $memberColumn(AdvOptions) 0]\\n\\n    # We support for many option formats for the IPAddress field.  Examples are:\\n    #  0.0.0.0                   Special value that signals to skip this pool member\\n    #  x.x.x.x[%y][;nodename]    IPv4 Address w/w/o Route Domain or Node Name\\n    #  abcd::0001[%y][;nodename] IPv6 Address w/w/o Route Domain or Node Name\\n    #  /Common/node_name         Pre-existing node name\\n    #  node_name                 Pre-existing node name without folder (default folder=Common)\\n    #  hostname.org.com          A DNS Hostname (resolved on deployment)\\n    #\\n    # These options are processed as follows:\\n    #  1) Skip row if IPAddress == \\\"0.0.0.0*\\\" or is empty\\n    #  2) Determine if a node object was specified or not\\n    #  3) If node object does not exist process as follows\\n    #    3a) If a nodename option was specified create the node object\\n    #    3b) If not IP than assume a hostname and resolve IP, create node using hostname, add node to member string\\n\\n    # 1) Skip pool members with a 0.0.0.0 or empty IP.  Added to allow creation of an empty pool when you still have\\n    # to expose the pool member IP as a tenant editable field in iWorkflow (Cisco APIC needs this for Dynamic Endpoint Insertion)\\n    if { [string match 0.0.0.0* $memberColumn(IPAddress)] || [string length $memberColumn(IPAddress)] == 0 } {\\n      debug [list pools $poolIdx members $memberId skip_ip] \\\"ip=0.0.0.0 or empty, skipping\\\" 7\\n      continue\\n    } else {\\n      incr numMembers\\n    }\\n\\n    # TODO: Is this still required?\\n    # Sometimes we receive a transposed ip/port from iWorkflow... fix it here\\n    if {[has_routedomain $memberColumn(Port)]} {\\n      set new_port $memberColumn(IPAddress)\\n      set new_ip $memberColumn(Port)\\n      set memberColumn(Port) $new_port\\n      set memberColumn(IPAddress) $new_ip\\n      debug [list pools $poolIdx members $memberId fix_ip_port] [format \\\"ip=%s port=%s\\\" $memberColumn(IPAddress) $memberColumn(Port)] 7\\n    }\\n\\n    set node_default_folder \\\"/Common/\\\"\\n    if { [string first \\\"/\\\" $memberColumn(IPAddress)] >= 0 } { set node_default_folder \\\"\\\" }\\n    set node_create 0\\n    if { [string first \\\\; $memberColumn(IPAddress)] > 1 } {\\n      set memberColumn(IPAddress) [lindex $memberColumn(IPAddress) 0]\\n      set node_info [psplit $memberColumn(IPAddress) \\\\;]\\n      set memberColumn(IPAddress) [lindex $node_info 0]\\n      set memberColumn(NodeName) [lindex $node_info 1]\\n      set node_obj_name [format \\\"%s%s\\\" $node_default_folder $memberColumn(NodeName)]\\n      debug [list pools $poolIdx members $memberId named_node node_obj_name] $node_obj_name 7\\n    } else {\\n      set node_obj_name [format \\\"%s%s\\\" $node_default_folder $memberColumn(IPAddress)]\\n      debug [list pools $poolIdx members $memberId node_obj_name] $node_obj_name 7\\n    }\\n\\n    # 2) Determine if a node object was specified rather than an IP address\\n    set node_exist [check_node_exist $node_obj_name]\\n    debug [list pools $poolIdx members $memberId set_blank_folder] \\\"folder=$node_default_folder name=$node_obj_name exist=$node_exist\\\" 7\\n\\n    debug [list pools $poolIdx members $memberId is_ip] \\\"$memberColumn(IPAddress) [is_ip $memberColumn(IPAddress)]\\\" 7\\n\\n    if { [info exists memberColumn(NodeName)] && $node_exist == 0 } {\\n      set node_create 1\\n    } else {\\n      if { $node_exist == 0 && [is_ip $memberColumn(IPAddress)] == 0 } {\\n        set memberColumn(NodeName) $memberColumn(IPAddress)\\n        set memberColumn(IPAddress) [dns_lookup $memberColumn(IPAddress)]\\n        debug [list pools $poolIdx members $memberId resolved_ip] $memberColumn(IPAddress) 7\\n        set node_create 1\\n      }\\n    }\\n\\n    if { $node_create } {\\n      set node_cmd [format \\\"ltm node /%s/%s address %s\\\" $partition $memberColumn(NodeName) $memberColumn(IPAddress)]\\n      debug [list pools $poolIdx members $memberId named_node tmsh_create] $node_cmd 7\\n      tmsh::create $node_cmd\\n      set __node_cache($memberColumn(NodeName)) 1\\n      set node_exist 1\\n      set memberColumn(IPAddress) [format \\\"/Common/%s\\\" $memberColumn(NodeName)]\\n    }\\n\\n    # Add a route domain if it wasn't included and we don't already have a node object created\\n    if { $node_exist == 0 && ![has_routedomain $memberColumn(IPAddress)]} {\\n      set memberColumn(IPAddress) [get_dest_addr $memberColumn(IPAddress)]\\n    }\\n\\n    # If we don't get a port in the pool member table than use the template value for pool__MemberDefaultPort\\n    # If pool__MemberDefaultPort is empty than use the value for pool__port\\n    if { [string length $memberColumn(Port)] == 0} {\\n      if { [string length $pool__MemberDefaultPort] == 0 } {\\n        debug [list pools $poolIdx members $memberId port_sub_vs] [format \\\"using %s\\\" $pool__port] 5\\n        set memberColumn(Port) $pool__port\\n      } else {\\n        debug [list pools $poolIdx members $memberId port_sub_default] [format \\\"using %s\\\" $pool__MemberDefaultPort] 5\\n        set memberColumn(Port) $pool__MemberDefaultPort\\n      }\\n    }\\n\\n    debug [list pools $poolIdx members $memberId normalized_config] [array get memberColumn] 7\\n\\n    if { [string length $memberColumn(AdvOptions)] > 0} {\\n      debug [list pools $poolIdx members $memberId adv_options] \\\"processing member advanced options string\\\" 7\\n      set memberColumn(AdvOptions) [format \\\" %s\\\" [process_options_string $memberColumn(AdvOptions) \\\"\\\" \\\"\\\"]]\\n    }\\n\\n    if { $node_exist } {\\n      # Node did exist, create <node name>:<port> string\\n      set memberColumn(Dest) [format \\\"%s:%s\\\" $memberColumn(IPAddress) $memberColumn(Port)]\\n    } else {\\n      # Node did not exist, get the correctly formatted ip, port string\\n      set memberColumn(Dest) [get_dest_str $memberColumn(IPAddress) $memberColumn(Port)]\\n    }\\n\\n\\tif { ![info exists ::pool_member_state($memberColumn(State))] } {\\n\\t\\terror \\\"The pool member state specified for $memberColumn(Dest) is not valid\\\"\\n\\t}\\n\\n\\tlappend postfinal_deferred_cmds [create_escaped_tmsh [format \\\"tmsh::modify ltm pool %s/%s members modify \\\\{ %s \\\\{ %s \\\\} \\\\}\\\" $app_path $poolNames($poolColumn(Index)) $memberColumn(Dest) $::pool_member_state($memberColumn(State))]]\\n\\n    append memberStr [format \\\" %s \\\\{ connection-limit %s ratio %s priority-group %s %s \\\\} \\\" $memberColumn(Dest) $memberColumn(ConnectionLimit) $memberColumn(Ratio) $memberColumn(PriorityGroup) $memberColumn(AdvOptions)]\\n  }\\n  append memberStr \\\" \\\\} \\\"\\n\\n  # Check to see if we really have any pool members after table processing\\n  if { $numMembers == 0 } {\\n    debug [list pools $poolIdx members] \\\"no true pool members found after table was processed, setting to none\\\" 5\\n    set memberStr \\\" members none\\\"\\n  }\\n\\n  debug [list pools $poolIdx member_str] \\\"memberStr=$memberStr\\\" 7\\n\\n  set poolColumn(AdvOptions) [lindex $poolColumn(AdvOptions) 0]\\n\\n  # We support multiple monitors and the ability to specify the minimum number of monitors that need\\n  # to pass for the pool to be considered healthy.  The format of the Monitor string from the Pool table is:\\n  #    (<monitor index>[,<monitor index>][;<minimum healthy>])\\n  #      For example:  0,1,2;3  specifies that this pool should associate the monitors created with\\n  #                             monitor index 0, 1 and 2 and that all 3 monitors need to pass for the\\n  #                             pool to be considered available.\\n  #\\n  # If no value is specifed no monitor is associated with the pool\\n  set monitor $poolColumn(Monitor)\\n  if { [string length $monitor] > 0 } {\\n    # Monitor info entered\\n    if { [string match \\\"*\\\\;*\\\" $monitor] } {\\n      # Min monitors specified\\n      set monitor [lindex $monitor 0]\\n      set monparts [split $monitor \\\\;]\\n      if { [llength $monparts] == 2 } {\\n        # Set the minimum number of monitors and list of monitors to associate\\n        set monmin [lindex $monparts 1]\\n        set monlist [split [lindex $monparts 0] ,]\\n      }\\n    } else {\\n      # Min monitors NOT specified, assume ALL monitors should pass and create list of monitors\\n      set monmin -1\\n      set monlist [split [lindex $poolColumn(Monitor) 0] ,]\\n    }\\n\\n    # Get the names of the monitors that were created above (array keyed by monitor index) and\\n    # check to make sure all monitors specified were actually created\\n    set monmapped {}\\n    foreach mon $monlist {\\n      if { [info exists monNames($mon)] } {\\n        lappend monmapped $monNames($mon)\\n      } else {\\n        error \\\"The monitor index '$mon' specified in pool index '$poolColumn(Index)' does not exist\\\"\\n      }\\n    }\\n\\n    # Setup our command\\n    if { $monmin > 0 } {\\n      set monitorCmd [format \\\"monitor min %s of { %s }\\\" $monmin [join $monmapped \\\" \\\"]]\\n    } else {\\n      set monitorCmd [format \\\"monitor \\\\\\\"%s\\\\\\\"\\\" [join $monmapped \\\" and \\\"]]\\n    }\\n  } else {\\n    # No monitor specified, set to none\\n    set monitorCmd \\\"monitor none\\\"\\n  }\\n\\n  # iCR does not like table columns with empty values.  Workaround this by allow use of keyword 'none' and NOOP\\n  if { [string tolower $poolColumn(AdvOptions)] == \\\"none\\\" } {\\n    set poolColumn(AdvOptions) \\\"\\\"\\n  }\\n\\n  # Setup the base pool create command\\n  set cmd [format \\\"ltm pool %s/%s %s %s \\\" $app_path $poolColumn(Name) $memberStr $monitorCmd]\\n\\n  array set pool_options {\\n    \\\"poolColumn(LbMethod)\\\" \\\"load-balancing-mode\\\"\\n    \\\"poolColumn(Description)\\\" \\\"description\\\"\\n  }\\n\\n  foreach {optionvar optioncmd} [array get pool_options] {\\n    append cmd [generic_add_option [list pools $poolIdx options] [set [subst $optionvar]] $optioncmd \\\"\\\" 0]\\n  }\\n\\n  if { [string length poolColumn(AdvOptions)] > 0 } {\\n    debug [list pools $poolIdx adv_options] \\\"processing advanced options string\\\" 7\\n    append cmd [format \\\" %s\\\" [process_options_string $poolColumn(AdvOptions) \\\"\\\" \\\"\\\"]]\\n  }\\n\\n  debug [list pools $poolIdx tmsh_create] $cmd 1\\n  tmsh::create $cmd\\n\\n  custom_extensions_after_pool\\n  incr poolIdx\\n}\\n\\nif { ![info exists poolIndexes($pool__DefaultPoolIndex)] \\n     && $pool__DefaultPoolIndex ne \\\"\\\" \\n     && $poolCount > 0 } {\\n  error \\\"The default pool index specified was not present in the pool table\\\"\\n}\\n\\n# Call the custom_extensions_after_pool proc to allow site-specific customizations\\ncustom_extensions_after_pools\\n\\n# Check to see if a vsName was specified... if not set to $app_vs\\nif { [string length $vs__Name] == 0 } {\\n  set vs__Name [format \\\"%s_default_vs_%s\\\" $app $pool__port]\\n  set addl_vs_basename [format \\\"%s_idx\\\" $app]\\n  change_var vs__Name $vs__Name\\n  debug [list virtual_server set_vs_name] [format \\\"no VS Name specified... setting to %s\\\" $vs__Name] 5\\n} else {\\n  set addl_vs_basename [format \\\"%s_idx\\\" $vs__Name]\\n}\\n\\n# Create L7 Traffic policy\\nset l7p_matchGroups [list]\\narray set l7p_matchGroupMap {}\\narray set l7p_matchRules {}\\nset l7p_actionGroups [list]\\narray set l7p_actionGroupMap {}\\narray set l7p_actionRules {}\\narray set l7p_requires {}\\narray set l7p_controls {}\\narray set l7p_asmrule {}\\narray set l7p_l7dosrule {}\\nset l7p_defer_create 0\\n\\nset l7p_numMatchRows [llength $l7policy__rulesMatch]\\nset l7p_numActionRows [llength $l7policy__rulesAction]\\ndebug \\\"l7policy\\\" [format \\\"numMatchRows=%s numActionRows=%s\\\" $l7p_numMatchRows, $l7p_numActionRows] 7\\n\\n# Prepare the l7p_matchGroups list and the associated l7p_matchGroupMap array.\\n# The list holds an ordered set of the discreet groups received\\n# The array holds a mapping of the group to it's associated rows in the table\\nset l7p_matchIdx 0\\nforeach l7p_matchRow $l7policy__rulesMatch {\\n  debug [list l7policy match_prep $l7p_matchIdx] [format \\\"matchRow=%s\\\" $l7p_matchRow] 9\\n\\n  array unset l7p_matchColumn\\n  array set l7p_matchColumn {}\\n  table_row_to_array $l7p_matchRow l7p_matchColumn ::table_defaults(L7P_Match)\\n\\n  if { [string tolower $l7p_matchColumn(Group)] != \\\"default\\\" && $l7p_matchColumn(Group) < 0 } {\\n    debug [list l7policy match_prep] \\\"skipping row, Group < 0\\\" 9\\n    incr l7p_matchIdx\\n    continue\\n  }\\n\\n  if { ![info exists l7p_matchGroupMap($l7p_matchColumn(Group))] } {\\n    set l7p_matchGroupMap($l7p_matchColumn(Group)) [list]\\n    lappend l7p_matchGroups $l7p_matchColumn(Group)\\n  }\\n  lappend l7p_matchGroupMap($l7p_matchColumn(Group)) $l7p_matchIdx\\n  incr l7p_matchIdx\\n}\\n\\n# Prepare the l7p_actionGroups list and the associated l7p_actionGroupMap array.\\n# The list holds an ordered set of the discreet groups received\\n# The array holds a mapping of the group to it's associated rows in the table\\nset l7p_actionIdx 0\\nforeach l7p_actionRow $l7policy__rulesAction {\\n  debug [list l7policy action_prep $l7p_actionIdx] [format \\\"actionRow=%s\\\" $l7p_actionRow] 9\\n\\n  array unset l7p_actionColumn\\n  array set l7p_actionColumn {}\\n  table_row_to_array $l7p_actionRow l7p_actionColumn ::table_defaults(L7P_Action)\\n\\n  if { [string tolower $l7p_actionColumn(Group)] != \\\"default\\\" && $l7p_actionColumn(Group) < 0 } {\\n    debug [list l7policy action_prep] \\\"skipping row, index < 0\\\" 9\\n    incr l7p_actionIdx\\n    continue\\n  }\\n\\n  if { ![info exists l7p_actionGroupMap($l7p_actionColumn(Group))] } {\\n    set l7p_actionGroupMap($l7p_actionColumn(Group)) [list]\\n    lappend l7p_actionGroups $l7p_actionColumn(Group)\\n  }\\n  lappend l7p_actionGroupMap($l7p_actionColumn(Group)) $l7p_actionIdx\\n  incr l7p_actionIdx\\n}\\n\\n# Perform a sanity check.  The number of groups should match between the match and action tables\\nforeach l7p_matchGroup $l7p_matchGroups {\\n  if { ! [info exists l7p_actionGroupMap($l7p_matchGroup)] } {\\n    error \\\"The L7 Policy Match Group '$l7p_matchGroup' was specified, however, an associated Action Group was not found\\\"\\n  }\\n}\\n\\n# Iterate through the l7p_matchGroups list (and the associated mapping array) and create our conditions.\\nforeach l7p_matchGroup $l7p_matchGroups {\\n  debug [list l7policy match $l7p_matchGroup] [format \\\"matchGroup=%s, mapping=%s\\\" $l7p_matchGroup $l7p_matchGroupMap($l7p_matchGroup)] 9\\n\\n  set l7p_matchRuleIdx 0\\n  foreach l7p_matchRule $l7p_matchGroupMap($l7p_matchGroup) {\\n    set l7p_matchRow [lindex $l7policy__rulesMatch $l7p_matchRule]\\n    debug [list l7policy match $l7p_matchGroup $l7p_matchRuleIdx] [format \\\"data=%s\\\" $l7p_matchRow] 9\\n\\n    array unset l7p_matchColumn\\n    array set l7p_matchColumn {}\\n    table_row_to_array $l7p_matchRow l7p_matchColumn ::table_defaults(L7P_Match)\\n\\n    # Determine which profile is required in the policy for the specified operand\\n    switch -glob [string tolower $l7p_matchColumn(Operand)] {\\n      client-ssl* { set l7p_requires(\\\"client-ssl\\\") 1 }\\n      http*       { set l7p_requires(\\\"http\\\") 1 }\\n      ssl*        { set l7p_requires(\\\"ssl-persistence\\\") 1 }\\n      tcp*        { set l7p_requires(\\\"tcp\\\") 1 }\\n      default {\\n        if { $l7p_matchColumn(Group) != \\\"default\\\" } {\\n          error \\\"Could not determine the correct profile type for L7 Policy Match, Group $l7p_matchColumn(Group), Operand $l7p_matchColumn(Operand)\\\"\\n        }\\n      }\\n    }\\n\\n    # Set our tmsh modifiers\\n    if { [string tolower $l7p_matchColumn(Negate)] == \\\"no\\\" } { set l7p_matchColumn(Negate) \\\"\\\" }\\n    if { [string tolower $l7p_matchColumn(Negate)] == \\\"yes\\\" } { set l7p_matchColumn(Negate) \\\"not\\\" }\\n    if { [string tolower $l7p_matchColumn(Missing)] == \\\"no\\\" } { set l7p_matchColumn(Missing) \\\"\\\" }\\n    if { [string tolower $l7p_matchColumn(Missing)] == \\\"yes\\\" } { set l7p_matchColumn(Missing) \\\"missing\\\" }\\n    if { [string tolower $l7p_matchColumn(CaseSensitive)] == \\\"no\\\" } { set l7p_matchColumn(CaseSensitive) \\\"case-insensitive\\\" }\\n    if { [string tolower $l7p_matchColumn(CaseSensitive)] == \\\"yes\\\" } { set l7p_matchColumn(CaseSensitive) \\\"case-sensitive\\\" }\\n\\n    # Process the operand.  The '/' character gets replaced with a ' ' to build the tmsh\\n    # command.  Additionally the ',' character gets replaced with a ' ' to allow for multiple\\n    # values to be passed to the operand.\\n    set l7p_match_oper [split $l7p_matchColumn(Operand) /]\\n    if { [llength $l7p_match_oper] > 0 } {\\n      set l7p_rule_opertmp [join $l7p_match_oper \\\" \\\"]\\n      set l7p_rule_valtmp \\\"\\\"\\n      if { [string length $l7p_matchColumn(Value)] > 0 } {\\n        set l7p_rule_valtmp [format \\\"%s %s values { \\\\\\\"%s\\\\\\\" }\\\" $l7p_matchColumn(Negate) $l7p_matchColumn(Condition) [string map {, \\\"\\\\\\\" \\\\\\\"\\\"} $l7p_matchColumn(Value)]]\\n      }\\n      lappend l7p_matchRules($l7p_matchGroup) [format \\\"%s { %s %s %s %s }\\\" $l7p_matchRuleIdx $l7p_rule_opertmp $l7p_matchColumn(Missing) $l7p_matchColumn(CaseSensitive) $l7p_rule_valtmp]\\n    } else {\\n      lappend l7p_matchRules($l7p_matchGroup) \\\"\\\"\\n    }\\n    debug [list l7policy match $l7p_matchGroup $l7p_matchRuleIdx] [format \\\"rule=%s\\\" [lindex $l7p_matchRules($l7p_matchGroup) $l7p_matchRuleIdx]] 7\\n    incr l7p_matchRuleIdx\\n  }\\n}\\n\\n# Iterate through the l7p_actionGroups list (and the associated mapping array) and create our actions.\\nforeach l7p_actionGroup $l7p_actionGroups {\\n  debug [list l7policy action $l7p_actionGroup] [format \\\"actionGroup=%s, mapping=%s\\\" $l7p_actionGroup $l7p_actionGroupMap($l7p_actionGroup)] 9\\n\\n  set l7p_actionRuleIdx 0\\n  foreach l7p_actionRule $l7p_actionGroupMap($l7p_actionGroup) {\\n    set l7p_actionRow [lindex $l7policy__rulesAction $l7p_actionRule]\\n    debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx] [format \\\"data=%s\\\" $l7p_actionRow] 9\\n\\n    array unset l7p_actionColumn\\n    array set l7p_actionColumn {}\\n    table_row_to_array $l7p_actionRow l7p_actionColumn ::table_defaults(L7P_Action)\\n\\n    if { [string tolower $l7p_actionColumn(Group)] == \\\"default\\\" } {\\n      set l7p_action_found_default 1\\n    }\\n\\n    # Determine which profile is required in the policy for the specified operand\\n    switch -glob [string tolower $l7p_actionColumn(Target)] {\\n      asm*            {\\n                        set l7p_controls(\\\"asm\\\") 1\\n                        set l7p_asmrule($l7p_actionGroup) 1\\n                      }\\n      cache*          { set l7p_controls(\\\"cache\\\") 1 }\\n      *compress*      { set l7p_controls(\\\"compression\\\") 1 }\\n      forward*        { set l7p_controls(\\\"forwarding\\\") 1 }\\n      http*           { set l7p_controls(\\\"forwarding\\\") 1 }\\n      l7dos*          {\\n                        set l7p_controls(\\\"l7dos\\\") 1\\n                        set l7p_controls(\\\"asm\\\") 1\\n                        set l7p_l7dosrule($l7p_actionGroup) 1\\n                      }\\n      log*            { set l7p_controls(\\\"forwarding\\\") 1 }\\n      request-adapt*  { set l7p_controls(\\\"request-adaption\\\") 1 }\\n      response-adapt* { set l7p_controls(\\\"response-adaptions\\\") 1 }\\n      server-ssl*     { set l7p_controls(\\\"server-ssl\\\") 1 }\\n      tcp-nagle*      { set l7p_controls(\\\"forwarding\\\") 1 }\\n      tcl*            { set l7p_controls(\\\"tcl\\\") 1 }\\n      default {\\n        error \\\"Could not determine the correct profile type for L7 Policy Action, Group $l7p_actionColumn(Group), Target $l7p_actionColumn(Target)\\\"\\n      }\\n    }\\n\\n    # Process the target(s).  Multiple targets/parameters are delimited by a '|' seperator.  The '/' character\\n    # gets replaced with a ' ' to build the tmsh command.  We then determine the type of target by\\n    # counting the number unique target elements.  3 element targets don't require a parameter\\n    # (eg: forward/request/reset). 4 element target require parameters.  We then parse the 4th element\\n    # as a comma-seperated string to determine the number of unique parameters required.  The\\n    # entered parameter is checked to ensure a parameters are entered (can be blank) and the the\\n    # tmsh command is created.\\n    set l7p_action_target_chunk \\\"\\\"\\n    set l7p_action_targets [split $l7p_actionColumn(Target) /]\\n    switch [llength $l7p_action_targets] {\\n      3 {\\n        set l7p_rule_targettmp [join $l7p_action_targets \\\" \\\"]\\n        set l7p_action_target_chunk [format \\\"%s \\\\{ %s \\\\}\\\" $l7p_actionRuleIdx $l7p_rule_targettmp]\\n        debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx 3_elements] [format \\\"chunk=%s\\\" $l7p_action_target_chunk] 7\\n       }\\n      4 {\\n        set l7p_rule_targettmp [format \\\"%s %s %s\\\" [lindex $l7p_action_targets 0] [lindex $l7p_action_targets 1] [lindex $l7p_action_targets 2]]\\n        set l7p_rule_parameters [psplit [lindex $l7p_action_targets 3] ,]\\n        # Fix the list in the case that we got a reserved character\\n        if { [llength $l7p_actionColumn(Parameter)] == 1 } {\\n          set l7p_actionColumn(Parameter) [lindex $l7p_actionColumn(Parameter) 0]\\n        }\\n\\n        set l7p_rule_values [psplit $l7p_actionColumn(Parameter) ,]\\n        debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx val_list] $l7p_actionColumn(Parameter) 7\\n\\n        set l7p_action_parIdx 0\\n\\n        set l7p_action_target_chunk [format \\\"%s \\\\{ %s \\\" $l7p_actionRuleIdx  $l7p_rule_targettmp]\\n        foreach l7p_action_parameter $l7p_rule_parameters {\\n          if { [llength $l7p_rule_parameters] == 1 } {\\n            set l7p_action_parameter_value $l7p_actionColumn(Parameter)\\n          } else {\\n            set l7p_action_parameter_value [lindex $l7p_rule_values $l7p_action_parIdx]\\n          }\\n\\n          # Special handling for forward/request/select/(pool|clone-pool).  Either a full path to\\n          # a pool can be entered (eg: /Common/mypool) or the index of a pool created in the pool__Pools\\n          # table can be referenced.  If a pool index is referenced we replace it here with the name\\n          # of the pool\\n          switch -regexp $l7p_actionColumn(Target) {\\n            ^.*(pool|clone-pool)$ {\\n              set l7p_action_parameter_poolidx -1\\n              if { [regexp {^pool:[0-9]+$} $l7p_action_parameter_value] } {\\n                set l7p_action_parameter_poolidx [lindex [split $l7p_action_parameter_value :] 1]\\n                debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx pool_substitute] [format \\\"idx=%s val=%s name=%s\\\" $l7p_action_parameter_poolidx $l7p_action_parameter_value $poolNames($l7p_action_parameter_poolidx)] 7\\n                set l7p_action_parameter_value [format \\\"%s/%s\\\" $app_path $poolNames($l7p_action_parameter_poolidx)]\\n              }\\n            }\\n            ^asm.*enable.*$ {\\n              if { [regexp {^bundled:(.*$)} $l7p_action_parameter_value -> l7p_action_parameter_asmpolicy] } {\\n                debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx asm_policy] [format \\\"%s\\\" $l7p_action_parameter_asmpolicy] 7\\n                if { ! [string match *$l7p_action_parameter_asmpolicy* $vs__BundledItems] } {\\n                  error \\\"L7 Policy Action Rule with Group $l7p_actionGroup Index $l7p_actionRuleIdx specified a bundled policy that wasn't selected for deployment\\\"\\n                }\\n                set l7p_action_parameter_asmpolicy [string map [list \\\"%APP_NAME%\\\" $app] $l7p_action_parameter_asmpolicy]\\n                set l7p_action_parameter_value [format \\\"%s/%s\\\" $app_path $l7p_action_parameter_asmpolicy]\\n                # Flag deferred creation of the policy because of bundled ASM policy\\n                set l7p_defer_create 1\\n              }\\n            }\\n          }\\n\\n          append l7p_action_target_chunk [format \\\"%s \\\\\\\"%s\\\\\\\" \\\" $l7p_action_parameter $l7p_action_parameter_value]\\n          incr l7p_action_parIdx\\n        }\\n        append l7p_action_target_chunk \\\"\\\\} \\\"\\n        debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx 4_element] [format \\\"chunk=%s\\\" $l7p_action_target_chunk] 7\\n      }\\n      default { error \\\"The target $l7p_actionColumn(Target) could not be processed\\\" }\\n    }\\n    lappend l7p_actionRules($l7p_actionGroup) $l7p_action_target_chunk\\n    debug [list l7policy action $l7p_actionGroup $l7p_actionRuleIdx] [format \\\"rule=%s\\\" [lindex $l7p_actionRules($l7p_actionGroup) $l7p_actionRuleIdx]] 7\\n    incr l7p_actionRuleIdx\\n  }\\n  debug [list l7policy action $l7p_actionGroup] [format \\\"rules=%s\\\" $l7p_actionRules($l7p_actionGroup)] 7\\n}\\n\\nif { [info exists l7p_controls(\\\"asm\\\")] && ! $l7p_action_found_default } {\\n  error \\\"A 'default' L7 Policy Action must be defined if you wish you use an ASM policy\\\"\\n}\\n\\n# Build our L7 ruleset\\nset l7p_cmd_rules \\\"rules replace-all-with \\\\{ \\\"\\nset l7p_ruleIdx 0\\nforeach l7p_matchGroup $l7p_matchGroups {\\n  debug [list l7policy rules $l7p_matchGroup \\\"match \\\"] $l7p_matchRules($l7p_matchGroup) 7\\n  debug [list l7policy rules $l7p_matchGroup action] $l7p_actionRules($l7p_matchGroup) 7\\n\\n  # If an ASM target was selected we must add a bypass action to each action in the ruleset\\n  # that does not contain an ASM target\\n  set l7p_rule_asmdefault \\\"\\\"\\n  if { ![info exists l7p_asmrule($l7p_matchGroup)] && [info exists l7p_controls(\\\"asm\\\")] } {\\n    if { [string tolower $l7policy__defaultASM] != \\\"bypass\\\" } {\\n      if { [regexp {^bundled:(.*$)} $l7policy__defaultASM -> l7p_action_default_asmpolicy] } {\\n        debug [list l7policy l7policy rules $l7p_matchGroup action default_asmpolicy] [format \\\"%s\\\" $l7p_action_default_asmpolicy] 7\\n        if { ! [string match *$l7p_action_default_asmpolicy* $vs__BundledItems] } {\\n          error \\\"L7 Policy Default ASM Policy specified a bundled policy that wasn't selected for deployment\\\"\\n        }\\n        set l7policy__defaultASM [format \\\"%s/%s\\\" $app_path $l7p_action_default_asmpolicy]\\n        set l7p_defer_create 1\\n      }\\n      set l7p_rule_asmdefault [format \\\" 98 { asm request enable policy %s } \\\" $l7policy__defaultASM]\\n      set l7p_controls(\\\"asm\\\") 1\\n    } else {\\n      set l7p_rule_asmdefault \\\" 98 { asm request disable } \\\"\\n    }\\n  }\\n\\n  set l7p_rule_l7dosdefault \\\"\\\"\\n  if { ![info exists l7p_l7dosrule($l7p_matchGroup)] && [info exists l7p_controls(\\\"l7dos\\\")] } {\\n    if { [string tolower $l7policy__defaultL7DOS] != \\\"bypass\\\" } {\\n      set l7p_rule_l7dosdefault [format \\\" 99 { l7dos request enable from-profile %s } \\\" $l7policy__defaultL7DOS]\\n      set l7p_controls(\\\"asm\\\") 1\\n      set l7p_controls(\\\"l7dos\\\") 1\\n    } else {\\n      set l7p_rule_l7dosdefault \\\" 99 { l7dos request disable } \\\"\\n    }\\n  }\\n\\n  set l7p_rule_default [format \\\"%s %s\\\" $l7p_rule_asmdefault $l7p_rule_l7dosdefault]\\n\\n  set l7p_rule_condpart \\\"\\\"\\n  if { [llength $l7p_matchRules($l7p_matchGroup)] > 0 && [string length [lindex $l7p_matchRules($l7p_matchGroup) 0]] > 0 } {\\n    set l7p_rule_condpart [format \\\"conditions replace-all-with \\\\{ %s \\\\}\\\" [join $l7p_matchRules($l7p_matchGroup) \\\" \\\"]]\\n  }\\n  set l7p_rule_actionpart [format \\\"actions replace-all-with \\\\{ %s %s \\\\}\\\" [join $l7p_actionRules($l7p_matchGroup) \\\" \\\"] $l7p_rule_default]\\n  append l7p_cmd_rules [format \\\"%s \\\\{ %s %s ordinal %s \\\\} \\\" $l7p_matchGroup $l7p_rule_condpart $l7p_rule_actionpart [expr {$l7p_ruleIdx+1}]]\\n  incr l7p_ruleIdx\\n}\\n\\n# Finish building the tmsh command and execute it\\nset l7p_cmd_requires [format \\\" requires replace-all-with { %s } \\\" [join [array names l7p_requires] \\\" \\\"]]\\nset l7p_cmd_controls [format \\\" controls replace-all-with { %s } \\\" [join [array names l7p_controls] \\\" \\\"]]\\n\\n# TMOS 12.1 introduced a new draft/publish model for L7 policies.  Check for\\n# that version and set a mode accordingly\\nif { [string match \\\"12.1*\\\" $version_info(version)] } {\\n  debug [list l7policy version_check] \\\"12.1 or newer detected\\\" 7\\n  set l7p_new_model 1\\n} else {\\n  debug [list l7policy version_check] \\\"12.0 or older detected\\\" 7\\n  set l7p_new_model 0\\n}\\n\\nif { $l7p_new_model } {\\n  if { $l7p_defer_create > 0 } {\\n    set l7p_cmd [format \\\"ltm policy %s/Drafts/%s_l7policy\\\" $app_path $app]\\n  } else {\\n    set l7p_cmd [format \\\"ltm policy %s/Drafts/%s_l7policy legacy\\\" $app_path $app]\\n  }\\n  set l7p_publish_cmd [format \\\"ltm policy %s/Drafts/%s_l7policy\\\" $app_path $app]\\n} else {\\n  set l7p_cmd [format \\\"ltm policy %s/%s_l7policy\\\" $app_path $app]\\n  set l7p_defer_cmd $l7p_cmd\\n}\\n\\nappend l7p_cmd [format \\\" strategy %s %s %s %s \\\\}\\\" $l7policy__strategy $l7p_cmd_requires $l7p_cmd_controls $l7p_cmd_rules]\\ndebug [list l7policy l7p_cmd] $l7p_cmd 7\\n\\nif { [llength $l7p_matchGroups] > 0 && [llength $l7p_actionGroups] > 0 } {\\n  if { $l7p_defer_create > 0 } {\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh [format \\\"tmsh::create sys folder %s/Drafts\\\" $app_path]]]\\n    \\n    debug [list l7policy defer_create] $l7p_cmd 1\\n    set l7p_cmd_create [format \\\"tmsh::create %s\\\" $l7p_cmd]\\n    set l7p_cmd_modify [format \\\"tmsh::modify %s\\\" $l7p_cmd]\\n\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh $l7p_cmd_modify]]\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh $l7p_cmd_create]]\\n\\n    if { $l7p_new_model } {\\n    \\tlappend bundler_deferred_cmds [format \\\"catch { tmsh::publish %s }\\\" [create_escaped_tmsh $l7p_publish_cmd]]\\n    }\\n\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh [format \\\"tmsh::modify ltm virtual %s/%s profiles add \\\\{ /Common/websecurity \\\\{ \\\\} \\\\}\\\" $app_path $vs__Name]]]\\n    lappend bundler_deferred_cmds [format \\\"catch { %s }\\\" [create_escaped_tmsh [format \\\"tmsh::modify ltm virtual %s/%s policies add \\\\{ %s/%s_l7policy \\\\}\\\" $app_path $vs__Name $app_path $app]]]\\n\\n    if { $l7p_new_model } {\\n      lappend bundler_deferred_cmds [format \\\"tmsh::delete sys folder %s/Drafts \\\" $app_path]\\n    }\\n  } else {\\n    tmsh::create [format \\\"sys folder %s/Drafts\\\" $app_path]\\n    debug [list l7policy tmsh_create] $l7p_cmd 1\\n    tmsh::create $l7p_cmd\\n  \\tif { $l7p_new_model } {\\n  \\t\\tdebug [list l7policy tmsh_publish] $l7p_publish_cmd 1\\n  \\t\\ttmsh::publish $l7p_publish_cmd\\n      tmsh::delete [format \\\"sys folder %s/Drafts\\\" $app_path]\\n  \\t}\\n\\n    # Add the created policy to the vs__AdvPolicies variable so we attach it to the\\n    # Virtual Server when it's created.\\n    append vs__AdvPolicies [format \\\" %s/%s_l7policy \\\" $app_path $app]\\n    debug [list l7policy add_policy_to_vs] [format \\\"vs__AdvPolicies=%s\\\" $vs__AdvPolicies] 5\\n  }\\n} else {\\n  debug [list l7policy skip_creation] \\\"No valid actions or rules after processing, skipping creation\\\" 7\\n}\\n\\n# Call the custom_extensions_before_vs proc to allow site-specific customizations\\ncustom_extensions_before_vs\\n\\n# Create virtual Server\\n\\n# Process the HTTP dependent features\\nif { [string length $vs__ProfileHTTP] > 0 } {\\n  # Process the 'auto' flag for feature__redirectToHTTPS\\n  if { $feature__redirectToHTTPS eq \\\"auto\\\" && $pool__port eq \\\"443\\\" && $pool__addr ne \\\"255.255.255.254\\\"} {\\n    debug [list virtual_server feature__redirectToHTTPS] \\\"found auto flag and port is 443, setting feature to enabled\\\" 5\\n    set feature__redirectToHTTPS enabled\\n  }\\n\\n  # Process the 'auto' flag for feature__insertXForwardedFor\\n  if { $feature__insertXForwardedFor eq \\\"auto\\\" && $vs__SNATConfig ne \\\"\\\"} {\\n    debug [list virtual_server feature__insertXForwardedFor] \\\"found auto flag, port is 443 or 80 and SNAT enabled, setting feature to enabled\\\" 5\\n    set feature__insertXForwardedFor enabled\\n  }\\n}\\n\\n# Process the vs__ProfileSecurityIPBlacklist option.\\nset ipi_mode 0\\nswitch -glob [string tolower $vs__ProfileSecurityIPBlacklist] {\\n  enabled-block { set ipi_action \\\"drop\\\" }\\n  enabled-log   { set ipi_action \\\"accept\\\" }\\n  none          { set ipi_mode 0 }\\n  /*            { set ipi_mode 2 }\\n  default {\\n    set ipi_create 0\\n    set vs__ProfileSecurityIPBlacklist none\\n  }\\n}\\n\\n# Process feature__easyL4Firewall options\\nset afm_auto_ipistring \\\"\\\"\\nif { [is_provisioned afm] && $pool__addr != \\\"255.255.255.254\\\" } {\\n  switch [string tolower $feature__easyL4Firewall] {\\n    auto {\\n      debug [list virtual_server feature__easyL4Firewall] \\\"found auto option, setting feature to enabled\\\" 5\\n      set feature__easyL4Firewall enabled\\n      set afm_auto_ipistring \\\"none\\\"\\n    }\\n    base {\\n      debug [list virtual_server feature__easyL4Firewall] \\\"found base flag, setting feature to enabled, vs__ProfileSecurityIPBlacklist to disabled\\\" 5\\n      set feature__easyL4Firewall enabled\\n      set afm_auto_ipistring \\\"none\\\"\\n    }\\n    base+ip_blacklist_block {\\n      debug [list virtual_server feature__easyL4Firewall] \\\"found auto option, setting feature to enabled, vs__ProfileSecurityIPBlacklist to enabled-block\\\" 5\\n      set feature__easyL4Firewall enabled\\n      set afm_auto_ipistring \\\"enabled-block\\\"\\n    }\\n    base+ip_blacklist_log {\\n      debug [list virtual_server feature__easyL4Firewall] \\\"found base+ipblacklist_log option, setting feature to enabled, vs__ProfileSecurityIPBlacklist to enabled-log\\\" 5\\n      set feature__easyL4Firewall enabled\\n      set afm_auto_ipistring \\\"enabled-log\\\"\\n    }\\n    default {\\n      if { [get_var feature__easyL4Firewall] == \\\"auto\\\"} {\\n        set afm_auto_ipistring \\\"none\\\"\\n      }\\n      set feature__easyL4Firewall disabled\\n    }\\n  }\\n  if { $ipi_mode < 2 } {\\n    change_var vs__ProfileSecurityIPBlacklist $afm_auto_ipistring\\n  }\\n} else {\\n  debug [list virtual_server feature__easyL4Firewall] \\\"AFM not provisioned, skipping\\\" 5\\n  if { $feature__easyL4Firewall != \\\"auto\\\" } {\\n    change_var feature__easyL4Firewall disabled\\n  }\\n  set feature__easyL4Firewall disabled\\n}\\n\\n# Check for HTTP Strict Transport Security (HSTS) option.  We do this here\\n# so the irule can be easily appended to the existing iRule list\\nif { $clientssl > 0 && [string match enabled* $feature__securityEnableHSTS] } {\\n  # include iRules used for feature__securityEnableHSTS\\n  set irule_HSTS {\\n    when HTTP_RESPONSE {\\n  HTTP::header insert Strict-Transport-Security \\\"%HSTSOPTIONS%\\\"\\n}\\n  }; # end irule_HSTS\\n  set irule_HSTS_redirect {\\n    when HTTP_REQUEST {\\n  HTTP::respond 301 Location \\\"https://[getfield [HTTP::host] \\\":\\\" 1][HTTP::uri]\\\"\\n}\\n  };\\n\\n  debug [list virtual_server feature__securityEnableHSTS] \\\"creating HSTS iRule\\\" 5\\n  set hstsrule [format \\\"%s/hsts_irule\\\" $app_path]\\n\\n  # Substitute in HSTS options is specified\\n  if { [string match \\\"*;*\\\" $feature__securityEnableHSTS] } {\\n    set hstsoptions [format \\\"%s\\\\; \\\" [lindex [split $feature__securityEnableHSTS \\\\;] 1]]\\n    set feature__securityEnableHSTS [lindex [split $feature__securityEnableHSTS \\\\;] 0]\\n    debug [list virtual_server feature__securityEnableHSTS options] $hstsoptions 7\\n  } else {\\n    set hstsoptions \\\"max-age=31536000; \\\"\\n  }\\n\\n  switch [string tolower $feature__securityEnableHSTS] {\\n    enabled-preload { append hstsoptions \\\"preload\\\" }\\n    enabled-subdomain { append hstsoptions \\\"includeSubDomains\\\" }\\n    enabled-preload-subdomain { append hstsoptions \\\"includeSubDomains\\\\; preload\\\" }\\n    default { error \\\"An invalid option was specified for feature__securityEnableHSTS\\\" }\\n  }\\n\\n  set irule_HSTS_final [string map [list %HSTSOPTIONS% $hstsoptions] $irule_HSTS]\\n\\n  set hstscmd \\\"ltm rule $hstsrule $irule_HSTS_final\\\"\\n  debug [list virtual_server feature__securityEnableHSTS tmsh_create] $hstscmd 1\\n  tmsh::create $hstscmd\\n\\n  if { $feature__redirectToHTTPS eq \\\"enabled\\\"} {\\n    debug [list virtual_server feature__securityEnableHSTS ssl_redirect_check] \\\"feature_redirectToHTTPS enabled, creating HSTS redirect iRule\\\" 5\\n    set hstsredirectrule [format \\\"%s/hsts_redirect_irule\\\" $app_path]\\n    set hstsredirectcmd \\\"ltm rule $hstsredirectrule $irule_HSTS_redirect\\\"\\n    debug [list virtual_server feature__securityEnableHSTS tmsh_create] $hstsredirectcmd 1\\n    tmsh::create $hstsredirectcmd\\n  }\\n\\n  if { [string length $vs__Irules] > 0 } {\\n    append vs__Irules \\\",$hstsrule\\\"\\n  } else {\\n    set vs__Irules $hstsrule\\n  }\\n  debug [list virtual_server feature__securityEnableHSTS add_irule_to_vs] [format \\\"vs__Irules=%s\\\" $vs__Irules] 7\\n}\\n\\nset cmd [format \\\"ltm virtual %s/%s \\\" $app_path $vs__Name]\\n\\n# Setup our listener destination address\\nset vs_dest_addr [get_dest_addr $pool__addr]\\n\\n# Keep vs_dest_addr as is for use by other features, create vs_dest with full <ip>%<rd>:<port> format\\nset vs_dest [get_dest_str $vs_dest_addr $pool__port]\\n\\ndebug [list virtual_server set_dest] [format \\\"vs_dest_addr=%s vs_dest=%s\\\" $vs_dest_addr $vs_dest] 7\\n\\n# Set virtual server options we support.  This array assumes a format \\\" <option> <input value>\\\" for the TMSH command.\\narray set vs_options {\\n \\\"pool__mask\\\" \\\"mask\\\"\\n \\\"vs_dest\\\" \\\"destination\\\"\\n \\\"vs__IpProtocol\\\" \\\"ip-protocol\\\"\\n \\\"vs__ConnectionLimit\\\" \\\"connection-limit\\\"\\n \\\"vs__Description\\\" \\\"description\\\"\\n \\\"vs__SourceAddress\\\" \\\"source\\\"\\n \\\"vs__OptionSourcePort\\\" \\\"source-port\\\"\\n \\\"vs__OptionConnectionMirroring\\\" \\\"mirror\\\"\\n \\\"vs__ProfileFallbackPersist\\\" \\\"fallback-persistence\\\"\\n \\\"vs__ProfilePerRequest\\\" \\\"per-flow-request-access-policy\\\"\\n}\\n\\nif { [string length $default_pool_name] > 0 } {\\n  set vs_options(default_pool_name) \\\"pool\\\"\\n}\\n\\n# Set virtual server options we support.  This array allows specifcation of the specific TMSH command format\\narray set vs_options_custom {\\n \\\"vs__Irules\\\" \\\" rules \\\\{ %s \\\\} \\\"\\n \\\"vs__ProfileDefaultPersist\\\" \\\" persist replace-all-with \\\\{ %s \\\\} \\\"\\n \\\"vs__ProfileSecurityLogProfiles\\\" \\\" security-log-profiles replace-all-with \\\\{ %s \\\\} \\\"\\n}\\n\\n# Process the create: option for persistence profiles\\narray set persist_create_defaults {\\n  \\\"cookie\\\" { default \\\"/Common/cookie\\\" }\\n  \\\"dest-addr\\\" { default \\\"/Common/dest_addr\\\" }\\n  \\\"hash\\\" { default \\\"/Common/hash\\\" }\\n  \\\"msrdp\\\" { default \\\"/Common/msrdp\\\" }\\n  \\\"sip\\\" { default \\\"/Common/sip_info\\\" }\\n  \\\"source-addr\\\" { default \\\"/Common/source_addr\\\" }\\n  \\\"ssl\\\" { default \\\"/Common/ssl\\\" }\\n  \\\"universal\\\" { default \\\"/Common/universal\\\" }\\n}\\n\\n# Loop over the two fields that allow this option\\nforeach persist_var [list vs__ProfileDefaultPersist vs__ProfileFallbackPersist] {\\n  set persist_val [set [subst $persist_var]]\\n  set persist_type \\\"\\\"\\n  if { [regexp -nocase {^create:} $persist_val] } {\\n    set persist_val [string map {\\\"create:\\\" \\\"\\\"} $persist_val]\\n\\n    # Process the string, check to see the persistence type was specified and is valid\\n    array set persist_options [process_kvp_string $persist_val]\\n    if { ! [info exists persist_options(type)] } {\\n      error \\\"The create string specified for $persist_var needs to include a 'type=(cookie|dest-addr|hash|msrdp|sip|source-addr|ssl|universal)' option\\\"\\n    }\\n\\n    if { ! [info exists persist_create_defaults($persist_options(type))] } {\\n      error \\\"The persistence type '$persist_options(type)' specified for $persist_var is not valid\\\"\\n    }\\n\\n    # Set some inital values\\n    array set persist_attr [subst $::persist_create_defaults($persist_options(type))]\\n    set persist_name [format \\\"%s_persistence_%s\\\" $app $persist_options(type)]\\n    set persist_cmd [format \\\"ltm persistence %s %s/%s \\\" $persist_options(type) $app_path $persist_name]\\n\\n    # Remove the 'type=XXX;' field from the create string\\n    set persist_val [string map [list \\\"type=$persist_options(type);\\\" \\\"\\\"] $persist_val]\\n\\n    # Process the rest of the options and get the TMSH string portion for options\\n    set persist_option_cmd [process_options_string $persist_val \\\"persistence $persist_options(type)\\\" $persist_attr(default) 1]\\n    debug [list virtual_server persistence create_handler $persist_var $persist_options(type)] [format \\\"%s\\\" $persist_option_cmd] 7\\n\\n    # Build our full TMSH command\\n    append persist_cmd $persist_option_cmd\\n\\n    # Reset the APL var to point to the new profile name\\n    set [subst $persist_var] [format \\\"%s/%s\\\" $app_path $persist_name]\\n    debug [list virtual_server persistence create_handler $persist_var $persist_options(type)] [format \\\"%s=%s\\\" $persist_var [set [subst $persist_var]]] 1\\n    debug [list virtual_server persistence create_handler $persist_var $persist_options(type) tmsh_create] [format \\\"%s\\\" $persist_cmd] 1\\n    tmsh::create $persist_cmd\\n  }\\n}\\n\\nhandle_opt_remove_on_redeploy vs__ProfilePerRequest \\\"\\\" \\\"per-flow-request-access-policy\\\" \\\"apm\\\"\\nhandle_opt_remove_on_redeploy vs__ProfileSecurityIPBlacklist \\\"none\\\" \\\"ip-intelligence-policy\\\" \\\"ltm\\\"\\n\\n# Process the vs__ProfileSecurityIPBlacklist option according to $ipi_mode set above\\nif { $ipi_mode == 1 } {\\n  debug [list virtual_server ip_blacklist create] [format \\\"ipi_action=%s, creating IPI policy\\\" $ipi_action] 7\\n  set ipi_name [create_obj_name \\\"ip_blacklist\\\"]\\n  set ipi_cmd [format \\\"security ip-intelligence policy %s default-action %s default-log-blacklist-hit-only yes\\\" $ipi_name $ipi_action]\\n  debug [list virtual_server ip_blacklist tmsh_create] $ipi_cmd 1\\n  tmsh::create $ipi_cmd\\n  set vs__ProfileSecurityIPBlacklist $ipi_name\\n  array set vs_options [list vs__ProfileSecurityIPBlacklist ip-intelligence-policy]\\n}\\n\\nif { $ipi_mode == 2 } {\\n  debug [list virtual_server ip_blacklist associate] [format \\\"adding existing IPI policy %s\\\" $vs__ProfileSecurityIPBlacklist] 7\\n  array set vs_options [list vs__ProfileSecurityIPBlacklist ip-intelligence-policy]\\n}\\n\\n# Process the feature__easyL4Firewall option\\nhandle_opt_remove_on_redeploy feature__easyL4Firewall \\\"disabled\\\" \\\"fw-enforced-policy\\\" \\\"afm\\\"\\n\\nif { $feature__easyL4Firewall == \\\"enabled\\\" } {\\n  debug [list virtual_server l4_firewall] \\\"creating FW policy\\\" 5\\n\\n  set cidr_blacklist [single_column_table_to_list $feature__easyL4FirewallBlacklist \\\"CIDRRange\\\"]\\n  debug [list virtual_server l4_firewall cidr_blacklist] $cidr_blacklist 7\\n\\n  set cidr_sourcelist [single_column_table_to_list $feature__easyL4FirewallSourceList \\\"CIDRRange\\\"]\\n  debug [list virtual_server l4_firewall cidr_sourcelist] $cidr_sourcelist 7\\n\\n  if { [llength $cidr_blacklist] > 0 } {\\n    debug [list virtual_server l4_firewall create_blacklist] \\\"creating static blacklist address-list\\\" 7\\n    set feature_easyL4Firewall_blacklistcmd [format \\\"security firewall address-list %s/afm_staticBlacklist addresses replace-all-with { %s }\\\" \\\\\\n     $app_path [join $cidr_blacklist \\\" \\\"]]\\n\\n    debug [list virtual_server l4_firewall create_blacklist tmsh_create] $feature_easyL4Firewall_blacklistcmd 1\\n    tmsh::create $feature_easyL4Firewall_blacklistcmd\\n    set feature_easyL4Firewall_blacklisttmpl [format \\\"staticBlacklist { action drop source { address-lists replace-all-with { %s/afm_staticBlacklist } } }\\\" $app_path]\\n  } else {\\n    set feature_easyL4Firewall_blacklisttmpl \\\"\\\"\\n  }\\n\\n  if { [llength $cidr_sourcelist] > 0 } {\\n    debug [list virtual_server l4_firewall create_sourcelist] \\\"creating source address-list\\\" 7\\n    set feature_easyL4Firewall_srclistcmd [format \\\"security firewall address-list %s/afm_sourceList addresses replace-all-with { %s }\\\" \\\\\\n     $app_path [join $cidr_sourcelist \\\" \\\"]]\\n\\n    debug [list virtual_server l4_firewall create_sourcelist tmsh_create] $feature_easyL4Firewall_srclistcmd 1\\n    tmsh::create $feature_easyL4Firewall_srclistcmd\\n  } else {\\n    debug [list virtual_server l4_firewall create_sourcelist] \\\"creating DEFAULT source address-list\\\" 7\\n    set feature_easyL4Firewall_srclistcmd [format \\\"security firewall address-list %s/afm_sourceList addresses replace-all-with { 0.0.0.0/0 }\\\" $app_path]\\n\\n    debug [list virtual_server l4_firewall create_sourcelist tmsh_create] $feature_easyL4Firewall_srclistcmd 1\\n    tmsh::create $feature_easyL4Firewall_srclistcmd\\n  }\\n  set feature_easyL4Firewall_srclist [format \\\"%s/afm_sourceList\\\" $app_path]\\n\\n  set fw_name [create_obj_name \\\"firewall\\\"]\\n  set fw_cmd [format \\\"\\\"]\\n  set fw_tmpl {\\nsecurity firewall policy %NAME% {\\n    rules replace-all-with {\\n        %STATIC_BLACKLIST%\\n        allowFrom {\\n            action accept\\n            ip-protocol %IP_PROTOCOL%\\n            source {\\n                address-lists replace-all-with {\\n                    %SOURCE_LIST%\\n                }\\n            }\\n        }\\n        defaultDeny {\\n            action drop\\n            ip-protocol %IP_PROTOCOL%\\n            log yes\\n            source {\\n                addresses replace-all-with {\\n                    0.0.0.0/0 { }\\n                }\\n            }\\n        }\\n    }\\n}\\n  };\\n\\n  set tmpl_map [list %NAME%             $fw_name \\\\\\n                     %IP_PROTOCOL%      $vs__IpProtocol \\\\\\n                     %STATIC_BLACKLIST% $feature_easyL4Firewall_blacklisttmpl \\\\\\n                     %SOURCE_LIST%      $feature_easyL4Firewall_srclist ]\\n\\n  set fw_policy [string map $tmpl_map $fw_tmpl]\\n  debug [list virtual_server l4_firewall tmsh_create] $fw_policy 1\\n  tmsh::create $fw_policy\\n  array set vs_options [list fw_name fw-enforced-policy]\\n}\\n\\n# Process bundled iRules\\nset vs__BundledItems [string map {\\\",\\\" \\\" \\\" \\\";\\\" \\\" \\\"} $vs__BundledItems]\\nset bundled_irules [get_items_starting_with \\\"irule:\\\" $vs__BundledItems]\\ndebug [list virtual_server bundled_irule get_list] [format \\\"%s\\\" $bundled_irules] 7\\n\\nif { [llength $bundled_irules] > 0 } {\\n  set bundled_irule_map [list %APP_PATH%      $app_path \\\\\\n                             %APP_NAME%      $app \\\\\\n                             %VS_NAME%       $vs__Name \\\\\\n                             %POOL_NAME%     $default_pool_name \\\\\\n                             %PARTITION%     $partition ]\\n\\n  foreach bundled_irule $bundled_irules {\\n    debug [list virtual_server bundled_irule create_irule] [format \\\"deploying bundled iRule %s\\\" $bundled_irule] 5\\n\\n    set bundled_irule_curl_mode -1\\n    if { [string match \\\"irule:url=*\\\" $bundled_irule] } {\\n      set bundled_irule_curl_mode 1\\n    } elseif { [string match \\\"irule:urloptional=*\\\" $bundled_irule] } {\\n      set bundled_irule_curl_mode 2\\n    } else {\\n      if {! [info exists bundler_objects($bundled_irule)] } {\\n        error \\\"A bundled iRule named '$bundled_irule' was not found in the template\\\"\\n      }\\n      set bundled_irule_src [string map $bundled_irule_map [::base64::decode $bundler_data($bundled_irule)]]\\n      set bundled_irule [string map {\\\"irule:\\\" \\\"\\\"} $bundled_irule]\\n      set bundled_irule_do_add 1\\n    }\\n\\n    debug [list virtual_server bundled_irule create_irule curl_mode] [format \\\"mode=%s\\\" $bundled_irule_curl_mode] 7\\n    if { $bundled_irule_curl_mode > 0 } {\\n      set bundled_irule_isurl 1\\n      set bundled_irule_url [url_subst $bundled_irule]\\n\\n      regexp {^.*/(.*).irule} $bundled_irule_url -> bundled_irule\\n      set bundled_irule_filename [format \\\"/var/tmp/appsvcs_irule_%s_%s_%s.irule\\\" $::app $bundled_irule $bundler_timestamp]\\n\\n      set bundled_irule_curl_state [curl_save_file $bundled_irule_url $bundled_irule_filename $bundled_irule_curl_mode]\\n      debug [list virtual_server bundled_irule create_irule curl_state] [format \\\"state=%s\\\" $bundled_irule_curl_state] 7\\n\\n      if { $bundled_irule_curl_state } {\\n        set bundled_irule_fh [open $bundled_irule_filename]\\n        set bundled_irule_src [string map $bundled_irule_map [read $bundled_irule_fh]]\\n        close $bundled_irule_fh\\n        set bundled_irule_do_add 1\\n      } else {\\n        set bundled_irule_do_add 0\\n      }\\n      file delete $bundled_irule_filename\\n    }\\n\\n    debug [list virtual_server bundled_irule $bundled_irule do_add] [format \\\"%s\\\" $bundled_irule_do_add] 7\\n    if { $bundled_irule_do_add } {\\n      set bundled_irule_cmd [format \\\"ltm rule %s/%s \\\\{\\\\n%s\\\\n\\\\}\\\" $app_path $bundled_irule $bundled_irule_src]\\n      debug [list virtual_server bundled_irule $bundled_irule tmsh_create] $bundled_irule_cmd 1\\n      tmsh::create $bundled_irule_cmd\\n      if { [string length $vs__Irules] > 0 } {\\n        append vs__Irules \\\",\\\"\\n      }\\n      append vs__Irules [format \\\"%s/%s\\\" $app_path $bundled_irule]\\n    }\\n  }\\n  debug [list virtual_server bundled_irule add_irule_to_vs] [format \\\"vs__Irules=\\\\\\\"%s\\\\\\\"\\\" $vs__Irules] 7\\n}\\n\\n# Process the vs_options array\\nforeach {optionvar optioncmd} [array get vs_options] {\\n  append cmd [generic_add_option [list virtual_server options] [set [subst $optionvar]] $optioncmd \\\"\\\" 0]\\n}\\n\\n# Process the vs_options_custom array\\nforeach {optionvar optioncmd} [array get vs_options_custom] {\\n  append cmd [generic_add_option [list virtual_server options_custom] [set [subst $optionvar]] \\\"\\\" $optioncmd 1]\\n}\\n\\nif { [string length $vs__AdvOptions] > 0 } {\\n  debug [list virtual_server adv_options] \\\"processing advanced options string\\\" 7\\n  append cmd [format \\\" %s\\\" [process_options_string $vs__AdvOptions \\\"\\\" \\\"\\\"]]\\n}\\n\\nset snatcmd \\\"\\\"\\n# Add SNAT options\\nif { [string length $vs__SNATConfig] > 0 } {\\n  switch -glob [string tolower $vs__SNATConfig] {\\n    automap {\\n      append snatcmd \\\" source-address-translation \\\\{ type automap \\\\}\\\"\\n    }\\n    partition-default {\\n      append snatcmd [format \\\" source-address-translation \\\\{ pool /%s/%s type snat \\\\}\\\" $partition $partition]\\n    }\\n    none {\\n      append snatcmd \\\" source-address-translation \\\\{ type none \\\\}\\\"\\n    }\\n    create:* {\\n      # split a string formatted like this: \\\"<ip>[,<ip1>]\\\"\\n\\n      set create_snat_iplist [split [string map {\\\"create:\\\" \\\"\\\"} $vs__SNATConfig] ,]\\n      set create_snat_poolname [format \\\"%s/%s_snatpool\\\" $app_path $app]\\n      set create_snat_poolcmd [format \\\"ltm snatpool %s members replace-all-with { \\\" $create_snat_poolname]\\n      foreach ip $create_snat_iplist {\\n        append create_snat_poolcmd [format \\\" %s%%%s \\\" $ip $rd]\\n      }\\n      append create_snat_poolcmd \\\"} \\\"\\n      debug [list virtual_server snat create_snat_pool tmsh_create] $create_snat_poolcmd 1\\n      tmsh::create $create_snat_poolcmd\\n      append snatcmd [format \\\" source-address-translation \\\\{ pool %s type snat \\\\}\\\" $create_snat_poolname]\\n    }\\n    default {\\n          tmsh::get_config /ltm snatpool $vs__SNATConfig\\n          append snatcmd [format \\\" source-address-translation \\\\{ pool %s type snat \\\\}\\\" $vs__SNATConfig]\\n    }\\n  }\\n  debug [list virtual_server snatcmd] $snatcmd 7\\n}\\nappend cmd $snatcmd\\n\\n# Process feature__insertXForwardedFor\\nif { $feature__insertXForwardedFor eq \\\"enabled\\\"} {\\n  if { [regexp -nocase {^create:} $vs__ProfileHTTP] } {\\n    if { ! [regexp -nocase {insert-xforwarded-for=enabled} $vs__ProfileHTTP] } {\\n      debug [list virtual_server feature__insertXForwardedFor append] \\\"Appending insert-xforwarded-for=enabled to existing HTTP profile customization string\\\" 5\\n      append vs__ProfileHTTP \\\";insert-xforwarded-for=enabled\\\"\\n    } else {\\n      debug [list virtual_server feature__insertXForwardedFor ignore] \\\"insert-xforwarded-for=enabled alredy in HTTP profile customization string... doing nothing\\\" 5\\n    }\\n  } else {\\n    debug [list virtual_server feature__insertXForwardedFor create] [format \\\"Creating HTTP profile customization string \\\\\\\"create:insert-xforwarded-for=enabled;defaults-from=%s\\\\\\\"\\\" $vs__ProfileHTTP] 5\\n    set vs__ProfileHTTP [format \\\"create:insert-xforwarded-for=enabled;defaults-from=%s\\\" $vs__ProfileHTTP]\\n  }\\n}\\n\\n# Process the create: option for profiles in the array below.\\n# Profiles that we support the \\\"create:option[=value][,option2[=value2]]\\\" format for option customization\\narray set profile_create_supported {\\n \\\"vs__ProfileClientProtocol\\\" { append \\\"_clientside\\\" }\\n \\\"vs__ProfileServerProtocol\\\" { append \\\"_serverside\\\"}\\n \\\"vs__ProfileHTTP\\\" { type \\\"http\\\" append \\\"\\\"}\\n \\\"vs__ProfileOneConnect\\\" { type \\\"one-connect\\\" append \\\"\\\"}\\n \\\"vs__ProfileCompression\\\" { type \\\"http-compression\\\" append \\\"\\\"}\\n \\\"vs__ProfileRequestLogging\\\" { type \\\"request-log\\\" append \\\"\\\"}\\n \\\"vs__ProfileServerSSL\\\" { type \\\"server-ssl\\\" append \\\"\\\"}\\n \\\"vs__ProfileClientSSL\\\" { type \\\"client-ssl\\\" append \\\"\\\"}\\n}\\n\\narray set profile_create_defaults {\\n  \\\"tcp\\\" { default \\\"/Common/tcp\\\" }\\n  \\\"udp\\\" { default \\\"/Common/udp\\\" }\\n  \\\"fastl4\\\" { default \\\"/Common/fastL4\\\" }\\n  \\\"fasthttp\\\" { default \\\"/Common/fasthttp\\\" }\\n  \\\"sctp\\\" { default \\\"/Common/sctp\\\" }\\n  \\\"ipother\\\" { default \\\"/Common/ipother\\\" }\\n  \\\"http\\\" { default \\\"/Common/http\\\" }\\n  \\\"one-connect\\\" { default \\\"/Common/oneconnect\\\" }\\n  \\\"http-compression\\\" { default \\\"/Common/httpcompression\\\" }\\n  \\\"request-log\\\" { default \\\"/Common/request-log\\\" }\\n  \\\"server-ssl\\\" { default \\\"/Common/serverssl\\\" }\\n  \\\"client-ssl\\\" { default \\\"/Common/clientssl\\\" }\\n}\\n\\n# Loop through the array\\nforeach {profile_var} [array names profile_create_supported] {\\n  # Setup some base vars\\n  array unset profile_attr\\n  array set profile_attr [subst $::profile_create_supported($profile_var)]\\n  set profile_val [set [subst $profile_var]]\\n  if { [regexp -nocase {^create:} $profile_val] } {\\n    set profile_val [string map {\\\"create:\\\" \\\"\\\"} $profile_val]\\n\\n    # Process the string, check to see the profile type was specified and is valid\\n    array unset profile_options\\n    array unset profile_default_array\\n    array set profile_options [process_kvp_string $profile_val]\\n    if { ! [info exists profile_options(type)] } {\\n      if { [info exists profile_attr(type)] } {\\n        set profile_options(type) $profile_attr(type)\\n      } else {\\n        error \\\"The create string specified for $profile_var needs to include a 'type' option specifying the type of profile to create\\\"\\n      }\\n    }\\n\\n    if { ! [info exists profile_create_defaults($profile_options(type))] } {\\n      error \\\"The profile type '$profile_options(type)' specified for $profile_var is not valid\\\"\\n    }\\n\\n    # Remove the 'type=XXX;' field from the create string\\n    set profile_val [string map [list \\\"type=$profile_options(type);\\\" \\\"\\\"] $profile_val]\\n    set profile_name [format \\\"%s_profile_%s%s\\\" $app $profile_options(type) $profile_attr(append)]\\n    set profile_cmd [format \\\"ltm profile %s %s/%s \\\" $profile_options(type) $app_path $profile_name]\\n    array set profile_default_array [subst $::profile_create_defaults($profile_options(type))]\\n    set profile_default $profile_default_array(default)\\n\\n    # Create the options portion of the TMSH command\\n    set profile_option_cmd [process_options_string $profile_val \\\"profile $profile_options(type)\\\" $profile_default 1]\\n    debug [list virtual_server profiles create_handler $profile_var] [format \\\"%s\\\" $profile_option_cmd] 7\\n\\n    # Build the final TMSH command\\n    append profile_cmd $profile_option_cmd\\n\\n    # Replace the APL var with the new profile name\\n    set [subst $profile_var] [format \\\"%s/%s\\\" $app_path $profile_name]\\n    debug [list virtual_server profiles create_handler $profile_var] [format \\\"%s=%s\\\" $profile_var [set [subst $profile_var]]] 1\\n\\n    # Allow run-time substition of the app name\\n    set profile_cmd [string map [list \\\"%APP_NAME%\\\" $app] $profile_cmd]\\n    debug [list virtual_server profiles create_handler $profile_var tmsh_create] [format \\\"%s\\\" $profile_cmd] 1\\n    tmsh::create $profile_cmd\\n  }\\n}\\n\\n# Add profiles\\nset vsprofiles \\\" profiles replace-all-with  \\\\{ \\\"\\ndebug [list virtual_server profiles] [format \\\"adding base vsprofiles=%s\\\" $vsprofiles] 7\\n\\n# We have to specify context aware profiles first\\n# Figure out the correct context to apply protocol profiles\\nset clientContext \\\"all\\\"\\nset serverContext \\\"all\\\"\\n\\nif { [string length $vs__ProfileClientProtocol] > 0 && [string length $vs__ProfileServerProtocol] > 0 && $vs__ProfileClientProtocol ne $vs__ProfileServerProtocol } {\\n  debug [list virtual_server profiles protocol] \\\"got both client and server protocol profiles\\\" 7\\n  set clientContext \\\"clientside\\\"\\n  set serverContext \\\"serverside\\\"\\n}\\n\\n# Client-side protocol\\nif { [string length $vs__ProfileClientProtocol] > 0 } {\\n  append vsprofiles [format \\\" %s \\\\{ context %s \\\\}\\\" $vs__ProfileClientProtocol $clientContext]\\n  debug [list virtual_server profiles protocol] [format \\\"clientside protocol name=%s context=%s\\\" $vs__ProfileClientProtocol $clientContext] 7\\n}\\n\\n# Server-side protocol\\nif { [string length $vs__ProfileServerProtocol] > 0 && $vs__ProfileClientProtocol ne $vs__ProfileServerProtocol } {\\n  append vsprofiles [format \\\" %s \\\\{ context %s \\\\}\\\" $vs__ProfileServerProtocol $serverContext]\\n  debug [list virtual_server profiles protocol] [format \\\"serverside protocol name=%s context=%s\\\" $vs__ProfileServerProtocol $serverContext] 7\\n}\\n\\n\\n# Set virtual server profiles we support.  The tmsh format expected is:\\n#    profiles replace-all-with { <profile1> [ { context [clientside|serverside|all] } ] <profile2> }\\n# To achieve this while re-using generic_add_option() we simply pass the var name with a blank option string\\n# Profiles that specify a proxy context can be specified in the vs_profiles_contextual array with the value\\n#   specifying the proxy context\\narray set vs_profiles_contextual {\\n   \\\"vs__ProfileConnectivity\\\" \\\"clientside\\\"\\n}\\n\\narray set vs_profiles {\\n \\\"vs__ProfileHTTP\\\" \\\"\\\"\\n \\\"vs__ProfileOneConnect\\\" \\\"\\\"\\n \\\"vs__ProfileCompression\\\" \\\"\\\"\\n \\\"vs__ProfileAnalytics\\\" \\\"\\\"\\n \\\"vs__ProfileRequestLogging\\\" \\\"\\\"\\n \\\"vs__ProfileServerSSL\\\" \\\"\\\"\\n \\\"vs__ProfileSecurityDoS\\\" \\\"\\\"\\n}\\n\\n# Handle the 'use-bundled' value for the VS Access Profile\\n# The bundler code will\\nset bundler_apm_associate 0\\nif { $vs__ProfileAccess eq \\\"use-bundled\\\" } {\\n  set bundler_apm_associate 1\\n} else {\\n  set vs_profiles(vs__ProfileAccess) \\\"\\\"\\n}\\n\\n# Save the base profile string for later use by feature__redirectToHTTPS\\nif { $feature__redirectToHTTPS eq \\\"enabled\\\"} {\\n  set vsprofiles_redirect $vsprofiles\\n}\\n\\n# Client-SSL profile created by iApp\\nif { $clientssl == 1 } {\\n  set vs__ProfileClientSSL [format \\\"%s/%s_clientssl\\\" $app_path $app]\\n  set vs_profiles(vs__ProfileClientSSL) \\\"\\\"\\n  debug [list virtual_server client_ssl associate_created] [format \\\"name=%s\\\" $vs__ProfileClientSSL] 7\\n}\\n\\n# Client-SSL profile specified via vs__ProfileClientSSL\\nif { $clientssl == 2 || $clientssl == 3} {\\n  set vs_profiles(vs__ProfileClientSSL) \\\"\\\"\\n  debug [list virtual_server client_ssl associate_existing] [format \\\"name=%s\\\" $vs__ProfileClientSSL] 7\\n}\\n\\n# Process the vs_profiles_contextual array first to make sure profiles that require a proxy\\n# context are added first\\nforeach {optionvar optioncmd} [array get vs_profiles_contextual] {\\n  append vsprofiles [generic_add_option [list virtual_server options] [set [subst $optionvar]] \\\"\\\" \\\" %s { context $optioncmd } \\\" 0]\\n}\\n\\n# Process the vs_profiles array to build the profiles command\\nforeach {optionvar optioncmd} [array get vs_profiles] {\\n  append vsprofiles [generic_add_option [list virtual_server options] [set [subst $optionvar]] $optioncmd \\\"\\\" 0]\\n}\\n\\nif { [string length $vs__AdvProfiles] > 0 } {\\n  debug [list virtual_server adv_options] \\\"processing advanced profile string\\\" 7\\n  append vsprofiles [format \\\" %s\\\" [generic_add_option [list virtual_server adv_profiles] $vs__AdvProfiles \\\"\\\" \\\"%s\\\" 1]]\\n}\\n\\nappend vsprofiles \\\" \\\\}\\\"\\ndebug [list virtual_server profiles cmd] $vsprofiles 7\\n\\n# Add the profile string to the TMSH command\\nappend cmd $vsprofiles\\n\\n# Process the $vs__AdvPolicies option\\nif { [string length $vs__AdvPolicies] > 0 } {\\n  debug [list virtual_server adv_policies] \\\"processing advanced policies string\\\" 7\\n  # Add the polcies string to the TMSH command\\n  set vspolicies [format \\\" policies replace-all-with \\\\{ %s \\\\} \\\" [generic_add_option [list virtual_server adv_policies] $vs__AdvPolicies \\\"\\\" \\\"%s\\\" 1]]\\n  debug [list virtual_server adv_policies cmd] $vspolicies 7\\n  append cmd $vspolicies\\n}\\n\\n# Create the virtual server\\nset stats_vs 0\\nif { $pool__addr ne \\\"255.255.255.254\\\" } {\\n  debug [list virtual_server tmsh_create] $cmd 1\\n  tmsh::create $cmd\\n  set stats_vs 1\\n\\n  # Process the additional listeners table\\n  set redirect_listeners []\\n  set vs_origcmd $cmd\\n\\n  debug [list virtual_server add_listeners] [format \\\"listenerCount=%s\\\" [llength $vs__Listeners]] 7\\n\\n  set listenerIdx 0\\n  set listenerRedirOverlap 0\\n  foreach listenerRow $vs__Listeners {\\n    debug [list virtual_server add_listeners $listenerIdx] [format \\\"listenerRow=%s\\\" $listenerRow] 9\\n\\n    set listenerMap [list]\\n    array unset listenerColumn\\n    array set listenerColumn {}\\n    table_row_to_array $listenerRow listenerColumn ::table_defaults(Listeners)\\n    debug [list virtual_server add_listeners $listenerIdx table_row_to_array return] [array get listenerColumn] 7\\n\\n    set listenerColumn(Listener) [lindex $listenerColumn(Listener) 0]\\n\\n    if { [string length $listenerColumn(Listener)] == 0 } {\\n      incr listenerIdx\\n      continue\\n    }\\n\\n    set listenerColumn(Destination) [lindex $listenerColumn(Destination) 0]\\n    array unset listenerDestOptions\\n    array set listenerDestOptions [process_kvp_string $listenerColumn(Destination)]\\n    debug [list virtual_server add_listeners $listenerIdx dest_options] [array get listenerDestOptions] 7\\n    regexp {^(.*)[:.]([0-9]{1,5})$} $listenerColumn(Listener) --> listenerColumn(Addr) listenerColumn(Port)\\n\\n    # If this row had the 'redirect' destination specified save it for later and skip this row\\n    if { [info exists listenerDestOptions(redirect)] } {\\n        if { $feature__redirectToHTTPS != \\\"enabled\\\" } {\\n          error \\\"To use the 'redirect' Destination for Listener $listenerColumn(Listener) feature__redirectToHTTPS but be enabled\\\"\\n        }\\n\\n        debug [list virtual_server add_listeners $listenerIdx redirect] $listenerColumn(Listener) 7\\n        lappend redirect_listeners [list $listenerColumn(Listener) [format \\\"%s_%s_redirect_%s\\\" $addl_vs_basename $listenerIdx $listenerColumn(Port)]]\\n        incr listenerIdx\\n        continue\\n    }\\n\\n    # If this row had the 'nossl,noclientssl,noserverssl' destination specified do not attach SSL profiles to the virtual server\\n    if { [info exists listenerDestOptions(nossl)] } {\\n      debug [list virtual_server add_listeners $listenerIdx nossl] $listenerColumn(Listener) 7\\n      lappend listenerMap \\\"\\\\\\\"$vs__ProfileClientSSL\\\\\\\"\\\" \\\"\\\"\\n      lappend listenerMap \\\"\\\\\\\"$vs__ProfileServerSSL\\\\\\\"\\\" \\\"\\\"\\n      set listenerColumn(Destination) [string map [list \\\"\\\\;nossl\\\" \\\"\\\"] $listenerColumn(Destination)]\\n    }\\n    if { [info exists listenerDestOptions(noclientssl)] } {\\n      debug [list virtual_server add_listeners $listenerIdx noclientssl] $listenerColumn(Listener) 7\\n      lappend listenerMap \\\"\\\\\\\"$vs__ProfileClientSSL\\\\\\\"\\\" \\\"\\\"\\n      set listenerColumn(Destination) [string map [list \\\"\\\\;noclientssl\\\" \\\"\\\"] $listenerColumn(Destination)]\\n    }\\n    if { [info exists listenerDestOptions(noserverssl)] } {\\n      debug [list virtual_server add_listeners $listenerIdx noserverssl] $listenerColumn(Listener) 7\\n      lappend listenerMap \\\"\\\\\\\"$vs__ProfileServerSSL\\\\\\\"\\\" \\\"\\\"\\n      set listenerColumn(Destination) [string map [list \\\"\\\\;noserverssl\\\" \\\"\\\"] $listenerColumn(Destination)]\\n    }\\n\\n    if { $listenerColumn(Destination) eq \\\"\\\" || [string tolower $listenerColumn(Destination)] eq \\\"default\\\"} {\\n      set listenerColumn(Pool) $default_pool_name\\n    } elseif { [string first \\\"/\\\" $listenerColumn(Destination)] >= 0 } {\\n      set listenerColumn(Pool) $listenerColumn(Destination)\\n    } else {\\n      if { ![info exist poolNames($listenerColumn(Destination))] } {\\n        error \\\"The listener $listenerColumn(Listener) referenced a destination pool index $listenerColumn(Destination) which does not exist\\\"\\n      }\\n      set listenerColumn(Pool) $poolNames($listenerColumn(Destination))\\n    }\\n\\n    # Setup our new tmsh command string\\n    set listenerColumn(Name) [format \\\"%s_%s_%s\\\" $addl_vs_basename $listenerIdx $listenerColumn(Port)]\\n    set listenerColumn(Dest) [get_dest_str $listenerColumn(Addr) $listenerColumn(Port)]\\n\\n    # Check to see if there is a potential overlap with the feature__redirectToHTTPS functionality\\n    if { $listenerColumn(Dest) eq [format \\\"%s:80\\\" $vs_dest_addr] } {\\n      set listenerRedirOverlap 1\\n    }\\n\\n    debug [list virtual_server add_listeners $listenerIdx] [format \\\"name=%s addr=%s port=%s dest=%s\\\" $listenerColumn(Name) $listenerColumn(Addr) $listenerColumn(Port) $listenerColumn(Dest)] 7\\n    set vs_listener_cmd [string map [list $vs__Name $listenerColumn(Name) \\\"$vs_dest_addr:$pool__port\\\" $listenerColumn(Dest) $default_pool_name $listenerColumn(Pool)] $vs_origcmd]\\n    # If our listener address is IPv6 we need to fixup the VS source filter and destination mask\\n    if { [is_ipv6 $listenerColumn(Addr)] } {\\n      set vs_listener_cmd [string map [list $vs__SourceAddress [format \\\"::%%%s/0\\\" $rd]] $vs_listener_cmd]\\n      set vs_listener_cmd [string map [list $pool__mask [format \\\"ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff\\\" $pool__mask]] $vs_listener_cmd]\\n    }\\n\\n    set vs_listener_cmd [string map $listenerMap $vs_listener_cmd]\\n\\n    debug [list virtual_server add_listeners $listenerIdx tmsh_create] $vs_listener_cmd 1\\n    tmsh::create $vs_listener_cmd\\n    incr listenerIdx\\n  }\\n\\n  if { !$listenerRedirOverlap } {\\n    # Add a listener for the default virtual server redirect\\n    lappend redirect_listeners [list [format \\\"%s:80\\\" $vs_dest_addr] [format \\\"%s_default_vs_redirect_80\\\" $app]]\\n  }\\n} else {\\n  debug [list virtual_server skip_create] \\\"found 255.255.255.254 as pool__addr, skipping creation\\\" 2\\n}\\n\\n# Call the custom_extensions_after_vs proc to allow site-specific customizations\\ncustom_extensions_after_vs\\n\\n# Create an additional virtual server on port 80 for feature__redirectToHTTPS\\nif { $feature__redirectToHTTPS eq \\\"enabled\\\" && $pool__addr ne \\\"255.255.255.254\\\" } {\\n  set redirect_listener_idx 0\\n  debug [list virtual_server feature__redirectToHTTPS redirect_listeners] $redirect_listeners 7\\n  foreach redirect_listener_list $redirect_listeners {\\n    set redirect_listener [lindex $redirect_listener_list 0]\\n    set redirect_listener_name [lindex $redirect_listener_list 1]\\n    debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx] [format \\\"dest=%s name=%s\\\" $redirect_listener $redirect_listener_name] 5\\n\\n    regexp {^(.*)[:.]([0-9]{1,5})$} $redirect_listener --> redirect_listener_addr redirect_listener_port\\n\\n    set redirect_listener_dest [get_dest_str $redirect_listener_addr $redirect_listener_port]\\n    debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx] [format \\\"creating redirect virtual server on %s\\\" $redirect_listener_dest] 5\\n\\n    array set redirect_listener_options {\\n     \\\"redirect_listener_mask\\\" \\\"mask\\\"\\n     \\\"redirect_listener_src\\\" \\\"source\\\"\\n     \\\"vs__IpProtocol\\\" \\\"ip-protocol\\\"\\n    }\\n\\n    if { $feature__easyL4Firewall == \\\"enabled\\\" } {\\n      set redirect_listener_options(fw_name) \\\"fw-enforced-policy\\\"\\n      debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx fw_check] [format \\\"feature__easyL4Firewall is enabled, using %s\\\" $redirect_listener_options(fw_name)] 5\\n    }\\n\\n    if { [is_ipv6 $redirect_listener_addr] } {\\n      set redirect_listener_src [format \\\"::0.0.0.0%%%s/0\\\" $rd]\\n      set redirect_listener_mask \\\"ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff\\\"\\n    } else {\\n      set redirect_listener_src $vs__SourceAddress\\n      set redirect_listener_mask \\\"255.255.255.255\\\"\\n    }\\n\\n    set redirect_listener_cmd [format \\\"ltm virtual %s/%s destination %s \\\" $app_path $redirect_listener_name $redirect_listener_dest]\\n\\n    # Process the vs_options array\\n    foreach {optionvar optioncmd} [array get redirect_listener_options] {\\n      append redirect_listener_cmd [generic_add_option [list virtual_server feature__redirectToHTTPS $redirect_listener_idx options] [set [subst $optionvar]] $optioncmd \\\"\\\" 0]\\n    }\\n\\n    # The HSTS spec recommends that when redirected a 301 Redirect is used, rather than a 302 like _sys_https_redirect uses\\n    if { [string match \\\"enabled*\\\" $feature__securityEnableHSTS] } {\\n      debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx hsts_check] [format \\\"feature__securityEnableHSTS is enabled, using %s\\\" $hstsredirectrule] 5\\n      append redirect_listener_cmd \\\" rules { $hstsredirectrule } \\\"\\n    } else {\\n      append redirect_listener_cmd \\\" rules { /Common/_sys_https_redirect } \\\"\\n    }\\n\\n    append redirect_listener_cmd $vsprofiles_redirect\\n    append redirect_listener_cmd [generic_add_option [list virtual_server feature__redirectToHTTPS $redirect_listener_idx options] $vs__ProfileHTTP \\\"\\\" \\\"\\\" 0]\\n    append redirect_listener_cmd \\\" \\\\}\\\"\\n    debug [list virtual_server feature__redirectToHTTPS $redirect_listener_idx tmsh_create] $redirect_listener_cmd 1\\n    tmsh::create $redirect_listener_cmd\\n    incr redirect_listener_idx\\n  }\\n}\\n\\n# Create iCall statistics publisher\\n# CAVEATS: This is mode specific because $app_stats is not set unless deployment\\n# is driven by iWorkflow.  To accomodate all use cases we make this mode specific:\\n# mode=1 (Standalone) : Look at $iapp__appStats from the presentation layer to control creation\\n# mode=2 (iWorkflow): Look at $app_stats set by iWorkflow to control creation\\n# mode=3 (APIC)       : Look at $app_stats set by iWorkflow to control creation\\ndebug [list stats] [format \\\"mode=%s app_stats=%s iapp__appStats=%s\\\" $mode $app_stats $iapp__appStats] 7\\nif { (($mode == 2 || $mode == 3 || $mode == 4) && $app_stats eq \\\"enabled\\\") || ($mode == 1 && $iapp__appStats eq \\\"enabled\\\") } {\\n  # Create the iCall stats publisher\\n  debug [list stats] \\\"creating icall stats publisher\\\" 7\\n      # START EMBEDDED ICALL SCRIPT\\n  set icall_script_tmpl {\\n# Copyright (c) 2017 F5 Networks, Inc.\\n#\\n# Licensed under the Apache License, Version 2.0 (the \\\"License\\\");\\n# you may not use this file except in compliance with the License.\\n# You may obtain a copy of the License at\\n#\\n#     http://www.apache.org/licenses/LICENSE-2.0\\n#\\n#     Unless required by applicable law or agreed to in writing, software\\n#     distributed under the License is distributed on an \\\"AS IS\\\" BASIS,\\n#     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\\n#     See the License for the specific language governing permissions and\\n#     limitations under the License.\\n#\\nset app %APP_NAME%\\nset partition %PARTITION%\\nset aso \\\"sys.application.service /$partition/${app}.app/$app\\\"\\n\\nset enabled_stats {}\\n\\nset pool_enabled %POOL_ENABLED%\\nset vs_enabled %VS_ENABLED%\\nset http_enabled %HTTP_ENABLED%\\nset ssl_enabled %SSL_ENABLED%\\n\\nif { $pool_enabled } { lappend enabled_stats \\\"pool\\\" }\\nif { $vs_enabled } { lappend enabled_stats \\\"virtual\\\" }\\nif { $http_enabled } { lappend enabled_stats \\\"http\\\" }\\nif { $ssl_enabled } { lappend enabled_stats \\\"ssl\\\" }\\n\\nset virtual_path    \\\"ltm virtual /$partition/${app}.app/%VS_NAME%\\\"\\nset http_path       \\\"ltm profile http %HTTP_PROFILE%\\\"\\nset ssl_path        \\\"ltm profile client-ssl %SSL_PROFILE%\\\"\\nset pool_path       \\\"ltm pool /$partition/${app}.app/%POOL_NAME%\\\"\\n\\n#puts \\\"app=$app\\\"\\n#puts \\\"partition=$partition\\\"\\n#puts \\\"aso=$aso\\\"\\n#puts \\\"virtual_path=$virtual_path\\\"\\n#puts \\\"http_path=$http_path\\\"\\n#puts \\\"pool_path=$pool_path\\\"\\n\\n# these lists represent strings taken from \\\"show ... field-fmt\\\"\\nset http_stats {\\n  get-reqs number-reqs post-reqs resp-2xx-cnt resp-3xx-cnt resp-4xx-cnt\\n  resp-5xx-cnt resp-bucket-1k resp-bucket-2m resp-bucket-4k resp-bucket-16k\\n  resp-bucket-32k resp-bucket-64k resp-bucket-128k resp-bucket-512k\\n  resp-bucket-large\\n}\\nset ssl_stats {\\n  common.cipher-uses.adh-keyxchg common.cipher-uses.aes-bulk common.cipher-uses.aes-gcm-bulk\\n  common.cipher-uses.des-bulk common.cipher-uses.dh-rsa-keyxchg common.cipher-uses.dhe-dss-keyxchg\\n  common.cipher-uses.ecdh-ecdsa-keyxchg common.cipher-uses.ecdh-rsa-keyxchg\\n  common.cipher-uses.ecdhe-ecdsa-keyxchg common.cipher-uses.ecdhe-rsa-keyxchg\\n  common.cipher-uses.edh-rsa-keyxchg common.cipher-uses.idea-bulk common.cipher-uses.md5-digest\\n  common.cipher-uses.null-bulk common.cipher-uses.null-digest common.cipher-uses.rc2-bulk\\n  common.cipher-uses.rc4-bulk common.cipher-uses.rsa-keyxchg common.cipher-uses.sha-digest\\n  common.cur-compat-conns common.cur-conns common.cur-native-conns common.decrypted-bytes-in\\n  common.decrypted-bytes-out common.encrypted-bytes-in common.encrypted-bytes-out\\n  common.fatal-alerts common.fully-hw-accelerated-conns common.handshake-failures\\n  common.insecure-handshake-accepts common.insecure-handshake-rejects common.insecure-renegotiation-rejects\\n  common.max-compat-conns common.max-conns common.max-native-conns\\n  common.non-hw-accelerated-conns common.partially-hw-accelerated-conns\\n  common.protocol-uses.dtlsv1 common.protocol-uses.sslv2 common.protocol-uses.sslv3\\n  common.protocol-uses.tlsv1 common.protocol-uses.tlsv1-1 common.protocol-uses.tlsv1-2\\n  common.secure-handshakes common.tot-compat-conns common.tot-native-conns\\n}\\nset virtual_stats {\\n    clientside.bits-in clientside.bits-out clientside.cur-conns\\n    clientside.max-conns clientside.pkts-in clientside.pkts-out\\n    clientside.tot-conns status.availability-state status.enabled-state\\n    status.status-reason\\n}\\nset pool_stats {\\n    active-member-cnt serverside.bits-in serverside.bits-out\\n    serverside.cur-conns serverside.max-conns serverside.pkts-in\\n    serverside.pkts-out serverside.tot-conns\\n}\\n\\n# loop over each type of object we want to look at, building the name\\n# of the path and the stats for it as needed\\nforeach type $enabled_stats {\\n    # making this its own variable made the Tcl validator stop throwing\\n    # a warning - though it _should_ be fine to move it inline w/its use\\n    set path [set ${type}_path]\\n    set objs [tmsh::get_status $path raw]\\n    if { [llength $objs] == 0 } {\\n        puts \\\"no object found for: $type\\\"\\n        continue\\n    }\\n    set obj [lindex $objs 0]\\n    #puts \\\"obj=$obj\\\"\\n    foreach stat [set ${type}_stats] {\\n        #puts \\\" stat=$stat\\\"\\n        set value [tmsh::get_field_value $obj $stat]\\n        #puts \\\" aso=$aso type=$type stat=$stat value=$value\\\"\\n        # associate the iStat with the app service\\n        istats::set \\\"$aso string $stat\\\" $value\\n    }\\n}\\n\\n# Set an additional iStat for the size of the pool, as this is not\\n# stored as a stat but is nice to have when looking at pool health.\\n# Do that here each run through rather than in the iApp because if\\n# an external pool is used or strictness was off the size of the\\n# pool can change and the iApp wouldn't run to adjust the size\\nif { $pool_enabled } {\\n  set pools [tmsh::get_config $pool_path]\\n  set numpools [llength $pools]\\n  set pool_size 0\\n  #puts \\\"numpools=$numpools pool_size=$pool_size\\\"\\n  if { $numpools == 1 } {\\n    # safe to assume only obj in list is our pool now. grab its size\\n    # and move along\\n    set pool [lindex $pools 0]\\n    set fdx 0\\n    set fields [tmsh::get_field_names nested $pool]\\n    set field_count [llength $fields]\\n    while { $fdx < $field_count } {\\n      set field [lindex $fields $fdx]\\n      #puts \\\"field=$field\\\"\\n      incr fdx\\n      if { $field eq \\\"members\\\"} {\\n        set pool_size [llength [tmsh::get_field_value $pool members]]\\n        #puts \\\"new pool_size=$pool_size\\\"\\n      }\\n    }\\n  }\\n  istats::set \\\"$aso string total-member-cnt\\\" $pool_size\\n}\\n#set tmc [istats::get $aso total-member-cnt]\\n#puts \\\"tmc=$tmc\\\"\\n  }; # END EMBEDDED ICALL SCRIPT\\n\\n  set stats_pool 0\\n  if { $poolCount > 0 && $default_pool_name ne \\\"\\\" } {\\n    set stats_pool 1\\n  }\\n\\n  if { [expr {$feature__statsHTTP eq \\\"enabled\\\" || $feature__statsHTTP eq \\\"auto\\\"}] && [string length $vs__ProfileHTTP] > 0 } {\\n    debug [list stats feature_statsHTTP] \\\"enabling HTTP stats\\\" 7\\n    set feature__statsHTTP 1\\n  } else {\\n    set feature__statsHTTP 0\\n  }\\n\\n  if { [expr {$feature__statsTLS eq \\\"enabled\\\" || $feature__statsTLS eq \\\"auto\\\"}] && [string length $vs__ProfileClientSSL] > 0 } {\\n    debug [list stats feature_statsTLS] \\\"enabling TLS stats\\\" 7\\n    set feature__statsTLS 1\\n  } else {\\n    set feature__statsTLS 0\\n  }\\n\\n  # used to fill in variables within iCall script\\n  set script_map [list %APP_NAME%      $app \\\\\\n                       %VS_NAME%       $vs__Name \\\\\\n                       %POOL_NAME%     $default_pool_name \\\\\\n                       %PARTITION%     $partition \\\\\\n                       %POOL_ENABLED%  $stats_pool \\\\\\n                       %VS_ENABLED%    $stats_vs \\\\\\n                       %HTTP_ENABLED%  $feature__statsHTTP \\\\\\n                       %HTTP_PROFILE%  [format \\\"%s\\\" $vs__ProfileHTTP] \\\\\\n                       %SSL_ENABLED%   $feature__statsTLS \\\\\\n                       %SSL_PROFILE%   [format \\\"%s\\\" $vs__ProfileClientSSL] ]\\n\\n  set icall_script_src [string map $script_map $icall_script_tmpl]\\n  debug [list stats icall_src] $icall_script_src 10\\n\\n  debug [list stats icall_script tmsh_create] \\\"publish_stats script\\\" 1\\n  tmsh::create sys icall script publish_stats definition \\\\{ $icall_script_src \\\\}\\n  debug [list stats icall_handler tmsh_create] \\\"iCall handler\\\" 1\\n  tmsh::create sys icall handler periodic publish_stats interval 60 script publish_stats\\n}\\n\\n# Process deferred deployment bundled ASM policies\\nset bundler_asm_policies [get_items_starting_with \\\"asm:\\\" $vs__BundledItems]\\nset bundler_apm_policies [get_items_starting_with \\\"apm:\\\" $vs__BundledItems]\\nset bundler_asm_deploy []\\nset bundler_apm_deploy []\\nset bundler_all_deploy 0\\nset postdeploy_final_state 1\\n\\n# First perform all our checks\\nif { [llength $bundler_asm_policies] > 0 } {\\n  if { ![is_provisioned asm]} {\\n    error \\\"A bundled ASM policy was selected, however, the ASM module is not provisioned on this device\\\"\\n  }\\n\\n  if { [string length $vs__ProfileHTTP] == 0 } {\\n    error \\\"A HTTP Profile is required to use ASM functionality\\\"\\n  }\\n}\\n\\nif { [llength $bundler_apm_policies] > 1 } {\\n  error \\\"Only one bundled APM policy may be selected for deployment\\\"\\n}\\n\\nif { [llength $bundler_apm_policies] == 1 } {\\n  if { ![is_provisioned apm]} {\\n    error \\\"A bundled APM policy was selected, however, the APM module is not provisioned on this device\\\"\\n  }\\n  if { [string length $vs__ProfileHTTP] == 0 } {\\n    error \\\"A HTTP Profile is required to use APM functionality\\\"\\n  }\\n}\\n\\n# Process deferred deployment bundled ASM policies\\nset bundler_asm_mode 0\\nif { [llength $bundler_asm_policies] > 0 } {\\n  foreach bundled_asm $bundler_asm_policies {\\n    set bundled_asm_isurl 0\\n    if { [string match \\\"asm:url=*\\\" $bundled_asm] } {\\n      set bundled_asm_isurl 1\\n      set bundled_asm_url [url_subst $bundled_asm]\\n      regexp {^.*/(.*).xml} $bundled_asm_url -> bundled_asm_stripped\\n      set bundled_asm_filename [format \\\"/var/tmp/appsvcs_asm_%s_%s_%s.xml\\\" $::app $bundled_asm_stripped $bundler_timestamp]\\n    } else {\\n      set bundled_asm_stripped [string map {\\\"asm:\\\" \\\"\\\"} $bundled_asm]\\n      set bundled_asm_filename [format \\\"/var/tmp/appsvcs_asm_%s_%s_%s.xml\\\" $::app $bundled_asm_stripped $bundler_timestamp]\\n    }\\n\\n    debug [list bundler asm check_preserve] [format \\\"%s %s\\\" $bundled_asm [string match *$bundled_asm* [get_items_starting_with \\\"asm:\\\" [get_var vs__BundledItems]]]] 7\\n    if { $newdeploy || \\\\\\n         [expr { $redeploy && [string match redeploy* $iapp__asmDeployMode]}] || \\\\\\n         [expr { $redeploy && [string match *$bundled_asm* [get_items_starting_with \\\"asm:\\\" [get_var vs__BundledItems]]]}] == 0 } {\\n      debug [list bundler asm deploy] $bundled_asm 5\\n      set bundler_asm_mode 1\\n\\n      if { $bundled_asm_isurl } {\\n        curl_save_file $bundled_asm_url $bundled_asm_filename\\n      } else {\\n        if {! [info exists bundler_objects($bundled_asm)] } {\\n          error \\\"A bundled ASM policy named '$bundled_asm' was not found in the template\\\"\\n        }\\n\\n        set outfile [open $bundled_asm_filename w]\\n        puts -nonewline $outfile [::base64::decode $bundler_data($bundled_asm)]\\n        close $outfile\\n      }\\n    } else {\\n      set bundler_asm_mode 2\\n      set savecmd [format \\\"asm policy %s/%s min-xml-file %s\\\" $app_path $bundled_asm_stripped $bundled_asm_filename]\\n      debug [list bundler asm preserve] [format \\\"preserving existing policy... save to %s\\\" $bundled_asm_filename] 5\\n      debug [list bundler asm preserve tmsh_save] $savecmd 1\\n      tmsh::save $savecmd\\n    }\\n    lappend bundler_asm_deploy $bundled_asm_stripped\\n    incr bundler_all_deploy\\n  }\\n}\\n\\n# Process deferred deployment bundled APM policies\\nset bundler_apm_mode 0\\n\\nif { [llength $bundler_apm_policies] == 1 } {\\n  set bundled_apm [lindex $bundler_apm_policies 0]\\n\\n  set bundled_apm_isurl 0\\n  if { [string match \\\"apm:url=*\\\" $bundled_apm] } {\\n    set bundled_apm_isurl 1\\n    set bundled_apm_url [url_subst $bundled_apm]\\n    regexp {^.*/(.*).tar.gz} $bundled_apm_url -> bundled_apm_stripped\\n    set bundled_apm_filename [format \\\"/var/tmp/appsvcs_apm_%s_%s_%s.tar.gz\\\" $::app $bundled_apm_stripped $bundler_timestamp]\\n  } else {\\n    set bundled_apm_stripped [string map {\\\"apm:\\\" \\\"\\\"} $bundled_apm]\\n    set bundled_apm_filename [format \\\"/var/tmp/appsvcs_apm_%s_%s_%s.tar.gz\\\" $::app $bundled_apm_stripped $bundler_timestamp]\\n  }\\n\\n  debug [list bundler apm check_preserve] [format \\\"%s %s\\\" $bundled_apm [string match *$bundled_apm* [get_items_starting_with \\\"apm:\\\" [get_var vs__BundledItems]]]] 7\\n  if { $newdeploy || \\\\\\n       [expr { $redeploy && [string match redeploy* $iapp__apmDeployMode]}] || \\\\\\n       [expr { $redeploy && [llength [get_items_starting_with \\\"apm:\\\" [get_var vs__BundledItems]]]}] == 0 } {\\n    debug [list bundler apm deploy] $bundled_apm 5\\n    set bundler_apm_mode 1\\n\\n    if { $bundled_apm_isurl } {\\n      curl_save_file $bundled_apm_url $bundled_apm_filename\\n    } else {\\n      if {! [info exists bundler_objects($bundled_apm)] } {\\n        error \\\"A bundled APM policy named '$bundled_apm' was not found in the template\\\"\\n      }\\n\\n      debug [list bundler apm deploy version_check] [format \\\"bundled_version=%s system_version=%s\\\" $bundler_objects($bundled_apm) $version_info(version)] 7\\n      if {! [string match $bundler_objects($bundled_apm)* $version_info(version)] } {\\n        error \\\"The bundled APM policy '$bundled_apm' requires BIG-IP version $bundler_objects($bundled_apm).  This system is running version $version_info(version)\\\"\\n      }\\n\\n      set outfile [open $bundled_apm_filename w]\\n      fconfigure $outfile -translation binary\\n      puts -nonewline $outfile [::base64::decode $bundler_data($bundled_apm)]\\n      close $outfile\\n    }\\n  } else {\\n    debug [list bundler apm preserve] $bundled_apm 5\\n    set bundler_apm_mode 2\\n    set bundled_apm_export_filename [format \\\"appsvcs_apm_%s_%s_%s\\\" $::app $bundled_apm_stripped $bundler_timestamp]\\n    switch -glob $version_info(version) {\\n      11.5* {\\n        #ng_export <access_profile_name> <filename> [<partition>] FIXTHIS\\n        set bundler_apm_exportcmd [format \\\"/usr/bin/env REMOTEUSER=admin USER=admin /usr/bin/ng_export %s.app/bundled_apm_policy %s %s\\\" $app $bundled_apm_export_filename $partition]\\n        set bundler_apm_renamecmd [format \\\"mv /tmp/%s.conf.tar.gz %s\\\" $bundled_apm_export_filename $bundled_apm_filename]\\n      }\\n      11.6* {\\n        set bundler_apm_exportcmd [format \\\"/usr/bin/env REMOTEUSER=admin USER=admin /usr/bin/ng_export %s.app/bundled_apm_policy %s -p %s\\\" $app $bundled_apm_export_filename $partition]\\n        set bundler_apm_renamecmd [format \\\"mv /tmp/profile-%s.conf.tar.gz %s\\\" $bundled_apm_export_filename $bundled_apm_filename]\\n      }\\n      12.* {\\n        set bundler_apm_exportcmd [format \\\"/usr/bin/env REMOTEUSER=admin USER=admin /usr/bin/ng_export %s.app/bundled_apm_policy %s -p %s\\\" $app $bundled_apm_export_filename $partition]\\n        set bundler_apm_renamecmd [format \\\"mv /tmp/profile-%s.conf.tar.gz %s\\\" $bundled_apm_export_filename $bundled_apm_filename]\\n      }\\n      default { error \\\"The TMOS version running on this device does not support the preserve APM deployment modes\\\" }\\n    }\\n    debug [list bundler apm preserve] [format \\\"preserving existing policy... save to %s\\\" $bundled_apm_filename] 5\\n    debug [list bundler apm preserve export_cmd] $bundler_apm_exportcmd 1\\n    debug [list bundler apm preserve rename_cmd] $bundler_apm_renamecmd 1\\n    eval exec $bundler_apm_exportcmd\\n    eval exec $bundler_apm_renamecmd\\n\\n  }\\n  lappend bundler_apm_deploy $bundled_apm_stripped\\n  incr bundler_all_deploy\\n}\\n\\nif { $bundler_all_deploy } {\\n  set postdeploy_final_state 0\\n  set bundler_enablevs 0\\n  if { [string match *\\\\-block $iapp__asmDeployMode] || [string match *\\\\-block $iapp__apmDeployMode] } {\\n    set bundler_vs_cmd [format \\\"ltm virtual %s/%s disabled\\\" $app_path $vs__Name]\\n    debug [list bundler check_deploy_mode] \\\"iapp__(asm|apm)DeployMode specified block mode, disabling virtual server\\\" 5\\n    debug [list bundler check_deploy_mode tmsh_modify] $bundler_vs_cmd 1\\n    tmsh::modify $bundler_vs_cmd\\n    set bundler_enablevs 1\\n  }\\n\\n  set bundler_icall_tmpl {\\nsys icall script %APP_PATH%/postdeploy_bundler {\\n    app-service %APP_PATH%/%APP_NAME%\\n    definition {\\nset app %APP_NAME%\\nset app_path %APP_PATH%\\nset partition %PARTITION%\\nset vs_name %VS_NAME%\\nset enable_vs %ENABLEVS%\\nset asm_policy_list [list %ASMPOLICYLIST%]\\nset apm_policy_list [list %APMPOLICYLIST%]\\nset all_policy_list [list %ASMPOLICYLIST% %APMPOLICYLIST%]\\nset timestamp %TIMESTAMP%\\nset apm_import_cmd [list %APMIMPORTCMD%]\\nset newdeploy %NEWDEPLOY%\\nset redeploy %REDEPLOY%\\nset apm_associate %APMASSOCIATE%\\nset asm_mode %ASMMODE%\\nset apm_mode %APMMODE%\\nset strict_updates %STRICTUPDATES%\\n\\nset aso \\\"/$partition/${app}.app/$app\\\"\\nset iaso [format \\\"sys.application.service %s\\\" $aso]\\nset logprefix \\\"\\\\[appsvcs_postdeploy_bundler\\\\]\\\\[$app\\\\]\\\"\\n\\nset systemTime [clock seconds]\\nputs \\\"$logprefix Starting at [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S]\\\"\\n\\nset file_found 0\\nforeach policy $asm_policy_list {\\n\\tset policy_filename [format \\\"/var/tmp/appsvcs_asm_%s_%s_%s.xml\\\" $app $policy $timestamp]\\n\\tputs \\\"$logprefix Looking for file '$policy_filename'...\\\"\\n\\tif { [file exists $policy_filename] } {\\n\\t\\tputs \\\"$logprefix  Found file matching policy '$policy' at '$policy_filename'\\\"\\n\\t\\tincr file_found\\n\\t}\\n}\\n\\nforeach policy $apm_policy_list {\\n\\tset policy_filename [format \\\"/var/tmp/appsvcs_apm_%s_%s_%s.tar.gz\\\" $app $policy $timestamp]\\n\\n\\tputs \\\"$logprefix Looking for file '$policy_filename'...\\\"\\n\\tif { [file exists $policy_filename] } {\\n\\t\\tputs \\\"$logprefix Found file matching policy '$policy' at '$policy_filename'\\\"\\n\\t\\tincr file_found\\n\\t}\\n}\\n\\nputs \\\"$logprefix [llength $all_policy_list] policies selected for deployment, $file_found policy files found\\\"\\n\\nif { $file_found != [llength $all_policy_list] } {\\n\\t\\tputs \\\"$logprefix All policy files were not found, exiting (this is normal on the secondary device)\\\"\\n\\t\\texit 0\\n}\\n\\ntmsh::cd $app_path\\nputs \\\"$logprefix Setting iCall handler to inactive...\\\"\\ntmsh::modify sys application service $aso strict-updates disabled\\ntmsh::modify sys icall handler periodic postdeploy_bundler status inactive\\n\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"ASM_IN_PROGRESS\\\"\\nforeach policy $asm_policy_list {\\n\\tistats::set [format \\\"%s string deploy.postdeploy_bundler.asm.%s\\\" $iaso $policy] \\\"DEPLOY_IN_PROGRESS\\\"\\n\\tset policy_filename [format \\\"/var/tmp/appsvcs_asm_%s_%s_%s.xml\\\" $app $policy $timestamp]\\n\\tputs \\\"$logprefix Loading ASM policy from $policy_filename to ASO $aso...\\\"\\n\\ttmsh::load asm policy $policy file $policy_filename overwrite\\n\\ttmsh::modify asm policy $policy app-service $aso\\n\\n\\tputs \\\"$logprefix  Setting ASM policy $app_path/$policy active...\\\"\\n\\ttmsh::modify asm policy $policy active\\n\\n\\tputs \\\"$logprefix  Deleting file $policy_filename...\\\"\\n\\tfile delete $policy_filename\\n\\tistats::set [format \\\"%s string deploy.postdeploy_bundler.asm.%s\\\" $iaso $policy] \\\"DEPLOY_COMPLETE\\\"\\n\\n}\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"ASM_COMPLETE\\\"\\n\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"APM_IN_PROGRESS\\\"\\nset apm_apply 0\\nforeach policy $apm_policy_list {\\n\\tistats::set [format \\\"%s string deploy.postdeploy_bundler.apm.%s\\\" $iaso $policy] \\\"DEPLOY_IN_PROGRESS\\\"\\n\\tset policy_filename [format \\\"/var/tmp/appsvcs_apm_%s_%s_%s.tar.gz\\\" $app $policy $timestamp]\\n\\n\\tif { $redeploy && $apm_mode == 2 } {\\n\\t\\tcatch { tmsh::modify [format \\\"ltm virtual %s/%s profiles delete \\\\{ %s/bundled_apm_policy \\\\{ \\\\} \\\\}\\\" $app_path $vs_name $app_path]\\n\\t\\t\\t\\ttmsh::delete apm profile access bundled_apm_policy\\n\\t\\t\\t\\ttmsh::delete apm policy access-policy bundled_apm_policy }\\n\\t}\\n\\n\\tputs \\\"$logprefix Loading APM policy from $policy_filename to ASO $aso...\\\"\\n\\teval exec $apm_import_cmd 2>&1\\n\\n\\t# Iterate through all the create APM objects and set the ASO\\n\\tforeach {apm_obj} [tmsh::get_config /apm] {\\n\\t\\tset apm_objname [lrange $apm_obj 0 end-1]\\n\\t\\ttmsh::modify [format \\\"%s app-service %s\\\" $apm_objname $aso]\\n\\t}\\n\\n\\tputs \\\"$logprefix  Applying APM policy $app_path/bundled_apm_policy...\\\"\\n\\t# We need to sleep outside of scriptd to allow TMM to commit the APM config\\n\\t# Credit to F5 iApp team/CTX VDI iApp for finding this\\n    set fn [format \\\"/var/tmp/appsvcs_apmapply_%s.sh\\\" $app]\\n    catch {\\n        set fh [open $fn w]\\n        puts $fh \\\"sleep 5\\\"\\n        puts $fh [format \\\"tmsh modify apm profile access %s/bundled_apm_policy generation-action increment\\\" $app_path]\\n        if { $enable_vs } {\\n        \\tset apm_apply 1\\n\\t\\t\\tputs \\\"$logprefix   Re-enabling Virtual Server after apply operation completes (block modifier was specified in deployment mode)\\\"\\n        \\tputs $fh [format \\\"tmsh modify ltm virtual %s/%s enabled\\\" $app_path $vs_name]\\n        }\\n        close $fh\\n        exec chmod 777 $fn\\n        exec $fn &\\n    } {}\\n\\n\\tif { $apm_associate } {\\n\\t\\tputs \\\"$logprefix  Associating APM policy with VS (use-bundled value specified for vs__ProfileAccess)\\\"\\n\\t\\ttmsh::modify [format \\\"ltm virtual %s/%s profiles add \\\\{ %s/bundled_apm_policy \\\\{ \\\\} \\\\}\\\" $app_path $vs_name $app_path]\\n\\t}\\n\\n\\tputs \\\"$logprefix  Deleting file $policy_filename...\\\"\\n\\tfile delete $policy_filename\\n\\tistats::set [format \\\"%s string deploy.postdeploy_bundler.apm.%s\\\" $iaso $policy] \\\"DEPLOY_COMPLETE\\\"\\n}\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"APM_COMPLETE\\\"\\n\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"DEFERRED_CMDS_IN_PROGRESS\\\"\\n%DEFERREDCMDS%\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"DEFERRED_CMDS_COMPLETE\\\"\\n\\nputs \\\"$logprefix Bundled policy deployment completed\\\"\\n\\nif { $enable_vs && ! $apm_apply} {\\n\\tputs \\\"$logprefix Re-enabling Virtual Server (block modifier was specified in deployment mode)\\\"\\n\\ttmsh::modify [format \\\"ltm virtual %s/%s enabled\\\" $app_path $vs_name]\\n}\\n\\n# puts \\\"$logprefix Delaying to ensure completion...\\\"\\n# after 10000\\n\\nset dellist {}\\nlappend dellist [format \\\"/var/tmp/appsvcs_apmapply_%s.sh\\\" $app]\\n# lappend dellist [format \\\"/var/tmp/appsvcs_postdeploy_%s.conf\\\" $app]\\n# lappend dellist [format \\\"/var/tmp/appsvcs_load_postdeploy_%s.sh\\\" $app]\\n\\nputs \\\"$logprefix Cleaning up...\\\"\\nforeach df $dellist {\\n\\tif { [file exists $df] } {\\n\\t\\tputs \\\"$logprefix  Deleting file '$df'\\\"\\n\\t\\tfile delete $df\\n\\t}\\n}\\n\\ntmsh::delete sys icall handler periodic postdeploy_bundler\\ntmsh::modify sys icall handler periodic postdeploy_final first-occurrence now status active\\nif { $strict_updates eq \\\"enabled\\\" } {\\n\\ttmsh::modify sys application service $aso strict-updates enabled\\n}\\n\\nset systemTime [clock seconds]\\nputs \\\"$logprefix Finished at [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S]\\\"\\nistats::set [format \\\"%s string deploy.postdeploy_bundler\\\" $iaso] \\\"FINISHED\\\"\\n    }\\n    description none\\n    events none\\n}\\n\\nsys icall handler periodic %APP_PATH%/postdeploy_bundler {\\n    app-service %APP_PATH%/%APP_NAME%\\n    first-occurrence %ICALLTIME%\\n    interval 3000\\n    last-occurrence now+10m\\n    script %APP_PATH%/postdeploy_bundler\\n    status active\\n}\\n  };\\n\\n  set bundler_apm_importcmd \\\"\\\"\\n  if { [llength $bundler_apm_policies] == 1 } {\\n    switch -glob $version_info(version) {\\n      11.5* {\\n        #ng_export <access_profile_name> <filename> [<partition>]\\n        set bundler_apm_importcmd [format \\\"/usr/bin/ng_import %s %s.app/bundled_apm_policy %s\\\" $bundled_apm_filename $app $partition]\\n      }\\n      11.6* {\\n        #ng_import [-s] <templatefile.conf.tar[.gz]> <new_name> [-p|-partition <partition>]\\n        set bundler_apm_importcmd [format \\\"/usr/bin/ng_import %s %s.app/bundled_apm_policy -p %s\\\" $bundled_apm_filename $app $partition]\\n      }\\n      12.* {\\n        #ng_import [-s] <templatefile.conf.tar[.gz]> <new_name> [-p|-partition <partition>]\\n        set bundler_apm_importcmd [format \\\"/usr/bin/ng_import %s %s.app/bundled_apm_policy -p %s\\\" $bundled_apm_filename $app $partition]\\n      }\\n      default { error \\\"The TMOS version running on this device does not support the preserve APM deployment modes\\\" }\\n    }\\n  }\\n\\n  set bundler_icall_time [clock format [expr {[clock seconds] + $::POSTDEPLOY_DELAY}] -format {%Y-%m-%d:%H:%M:%S}]\\n  set bundler_script_map [list %APP_NAME%  $::app \\\\\\n                       %APP_PATH%      $::app_path \\\\\\n                       %VS_NAME%       $::vs__Name \\\\\\n                       %PARTITION%     $::partition \\\\\\n                       %ENABLEVS%      $bundler_enablevs \\\\\\n                       %ASMPOLICYLIST% $bundler_asm_deploy \\\\\\n                       %APMPOLICYLIST% $bundler_apm_deploy \\\\\\n                       %TIMESTAMP%     $bundler_timestamp \\\\\\n                       %APMIMPORTCMD%  $bundler_apm_importcmd \\\\\\n                       %ICALLTIME%     $bundler_icall_time \\\\\\n                       %NEWDEPLOY%     $newdeploy \\\\\\n                       %REDEPLOY%      $redeploy \\\\\\n                       %ASMMODE%       $bundler_asm_mode \\\\\\n                       %APMMODE%       $bundler_apm_mode \\\\\\n                       %APMASSOCIATE%  $bundler_apm_associate \\\\\\n                       %DEFERREDCMDS%  [join $bundler_deferred_cmds \\\"\\\\n\\\"] \\\\\\n                       %STRICTUPDATES% $iapp__strictUpdates ]\\n\\n  set bundler_icall_src [string map $bundler_script_map $bundler_icall_tmpl]\\n  debug [list bundler icall_src] [format \\\"%s\\\" $bundler_icall_src] 10\\n  debug [list bundler icall_handler] [format \\\"creating iCall handler; executing postdeploy script at: %s\\\" $bundler_icall_time] 7\\n\\n  set fn [format \\\"/var/tmp/appsvcs_postdeploy_%s.conf\\\" $app]\\n  catch {\\n      set fh [open $fn w]\\n      puts $fh $bundler_icall_src\\n      close $fh\\n  } {}\\n\\n  debug [list bundler deploy] \\\"Bundled policy deployment will complete momentarily...\\\" 5\\n}\\n\\nif { [string length $vs__RouteAdv] > 0 && $vs__RouteAdv ne \\\"disabled\\\" } {\\n  switch $vs__RouteAdv {\\n    \\\"any_vs\\\" { set routeadv_mode \\\"any\\\" }\\n    \\\"all_vs\\\" { set routeadv_mode \\\"all\\\" }\\n    \\\"always\\\" { set routeadv_mode \\\"none\\\" }\\n    default { error \\\"The value specified for the Route Advertisement mode (vs__RouteAdv) is invalid\\\" }\\n  }\\n  debug [list virtual_address route-adv] [format \\\"enabling route advertisement for virtual address %s with mode %s (postdeploy_final)\\\" $vs_dest_addr $routeadv_mode] 5\\n  lappend postfinal_deferred_cmds [create_escaped_tmsh [format \\\"tmsh::modify ltm virtual-address /%s/%s route-advertisement enabled\\\" $partition $vs_dest_addr]]\\n  lappend postfinal_deferred_cmds [create_escaped_tmsh [format \\\"tmsh::modify ltm virtual-address /%s/%s server-scope %s\\\" $partition $vs_dest_addr $routeadv_mode]]\\n}\\n\\nif { [string length $vs__VirtualAddrAdvOptions] > 0 } {\\n  set cmd [format \\\"tmsh::modify ltm virtual-address /%s/%s\\\" $partition $vs_dest_addr]\\n  if { [string length $vs__VirtualAddrAdvOptions] > 0 } {\\n    debug [list virtual_address adv_options] \\\"processing advanced options string\\\" 7\\n    append cmd [format \\\" %s\\\" [process_options_string $vs__VirtualAddrAdvOptions \\\"\\\" \\\"\\\"]]\\n  }\\n  debug [list virtual_address adv_options] $cmd 5\\n  lappend postfinal_deferred_cmds [create_escaped_tmsh $cmd]\\n}\\n\\n# Call the custom_extensions_end proc to allow site-specific customizations\\ncustom_extensions_end\\n\\nset postfinal_icall_tmpl {\\nsys icall script %APP_PATH%/postdeploy_final {\\n    app-service %APP_PATH%/%APP_NAME%\\n    definition {\\nset app %APP_NAME%\\nset app_path %APP_PATH%\\nset partition %PARTITION%\\nset vs_name %VS_NAME%\\nset newdeploy %NEWDEPLOY%\\nset redeploy %REDEPLOY%\\nset strict_updates %STRICTUPDATES%\\n\\nset aso \\\"/$partition/${app}.app/$app\\\"\\nset iaso [format \\\"sys.application.service %s\\\" $aso]\\nset logprefix \\\"\\\\[appsvcs_postdeploy_final\\\\]\\\\[$app\\\\]\\\"\\n\\nset systemTime [clock seconds]\\nputs \\\"$logprefix Starting at [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S]\\\"\\n\\ntmsh::cd $app_path\\nputs \\\"$logprefix Setting iCall handler to inactive...\\\"\\ntmsh::modify sys application service $aso strict-updates disabled\\ntmsh::modify sys icall handler periodic postdeploy_final status inactive\\n\\nistats::set [format \\\"%s string deploy.postdeploy_final\\\" $iaso] \\\"STARTED\\\"\\nistats::set [format \\\"%s string deploy.postdeploy_final\\\" $iaso] \\\"DEFERRED_CMDS_IN_PROGRESS\\\"\\nputs \\\"$logprefix Executing deferred commands...\\\"\\n%DEFERREDCMDS%\\nputs \\\"$logprefix Completed executing deferred commands...\\\"\\nistats::set [format \\\"%s string deploy.postdeploy_final\\\" $iaso] \\\"DEFERRED_CMDS_COMPLETE\\\"\\n\\ntmsh::delete sys icall handler periodic postdeploy_final\\nif { $strict_updates eq \\\"enabled\\\" } {\\n\\ttmsh::modify sys application service $aso strict-updates enabled\\n}\\n#tmsh::save sys config\\n\\nset systemTime [clock seconds]\\nputs \\\"$logprefix Finished at [clock format $systemTime -format %D] [clock format $systemTime -format %H:%M:%S]\\\"\\nistats::set [format \\\"%s string deploy.postdeploy_final\\\" $iaso] [format \\\"FINISHED_%s\\\" $systemTime]\\n    }\\n    description none\\n    events none\\n}\\n\\nsys icall handler periodic %APP_PATH%/postdeploy_final {\\n    app-service %APP_PATH%/%APP_NAME%\\n    first-occurrence %ICALLTIME%\\n    interval 3000\\n    last-occurrence now+10m\\n    script %APP_PATH%/postdeploy_final\\n    status %HANDLER_STATE%\\n}\\n\\ncli script /Common/appsvcs_get_istat {\\nproc script::init {} {\\n}\\n\\nproc script::run {} {\\n    if { $tmsh::argc < 2 } {\\n        puts \\\"Please specify a iStat key to get\\\"\\n        exit\\n    }\\n    puts [istats::get [lindex $tmsh::argv 1]]\\n}\\n\\nproc script::help {} {\\n}\\n\\nproc script::tabc {} {\\n}\\n}\\n};\\n\\nset postfinal_handler_state \\\"inactive\\\"\\nif { $postdeploy_final_state } {\\n  set postfinal_handler_state \\\"active\\\"\\n}\\n\\nset postfinal_deferred_cmds_str [join $postfinal_deferred_cmds \\\"\\\\n\\\"]\\n\\nset postfinal_icall_time [clock format [expr {[clock seconds] + $::POSTDEPLOY_DELAY}] -format {%Y-%m-%d:%H:%M:%S}]\\nset postfinal_script_map [list %APP_NAME%  $::app \\\\\\n                     %APP_PATH%      $::app_path \\\\\\n                     %VS_NAME%       $::vs__Name \\\\\\n                     %PARTITION%     $::partition \\\\\\n                     %ICALLTIME%     $postfinal_icall_time \\\\\\n                     %NEWDEPLOY%     $newdeploy \\\\\\n                     %REDEPLOY%      $redeploy \\\\\\n                     %DEFERREDCMDS%  $postfinal_deferred_cmds_str \\\\\\n                     %STRICTUPDATES% $iapp__strictUpdates \\\\\\n                     %HANDLER_STATE% $postfinal_handler_state ]\\n\\nset postfinal_icall_src [string map $postfinal_script_map $postfinal_icall_tmpl]\\ndebug [list postfinal icall_src] [format \\\"%s\\\" $postfinal_icall_src] 10\\ndebug [list postfinal icall_handler] [format \\\"creating iCall handler; executing postdeploy_final script at: %s\\\" $postfinal_icall_time] 7\\n\\nset fn [format \\\"/var/tmp/appsvcs_postdeploy_%s.conf\\\" $app]\\ncatch {\\n    if { $bundler_all_deploy } {\\n      set fh [open $fn a]\\n    } else {\\n      set fh [open $fn w]\\n    }\\n    puts $fh \\\"\\\"\\n    puts $fh $postfinal_icall_src\\n    close $fh\\n} {}\\n\\nset fn [format \\\"/var/tmp/appsvcs_load_postdeploy_%s.sh\\\" $app]\\ncatch {\\n    set fh [open $fn w]\\n    puts $fh \\\"sleep 5\\\"\\n    puts $fh [format \\\"tmsh load sys config file /var/tmp/appsvcs_postdeploy_%s.conf merge\\\" $app]\\n    puts $fh [format \\\"rm -f /var/tmp/appsvcs_postdeploy_%s.conf\\\" $app]\\n    puts $fh [format \\\"rm -f /var/tmp/appsvcs_load_postdeploy_%s.sh\\\" $app]\\n    close $fh\\n    exec chmod 777 $fn\\n    exec $fn &\\n} {}\\n\\nif { $iapp__strictUpdates eq \\\"disabled\\\" } {\\n  debug [list strict_updates] \\\"disabling strict updates\\\" 5\\n  tmsh::modify [format \\\"sys application service %s/%s strict-updates disabled\\\" $app_path $app]\\n}\\n\\nset runTime [expr {[clock seconds] - $startTime}]\\ndebug [list stop] [format \\\"Finished app_name=%s, total run time was %s seconds\\\" $app $runTime] 0\\n            }\\n            macro {\\n            }\\n            presentation {\\n#\\n# Copyright (c) 2017 F5 Networks, Inc.\\n#\\n# Licensed under the Apache License, Version 2.0 (the \\\"License\\\");\\n# you may not use this file except in compliance with the License.\\n# You may obtain a copy of the License at\\n#\\n#     http://www.apache.org/licenses/LICENSE-2.0\\n#\\n#     Unless required by applicable law or agreed to in writing, software\\n#     distributed under the License is distributed on an \\\"AS IS\\\" BASIS,\\n#     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\\n#     See the License for the specific language governing permissions and\\n#     limitations under the License.\\n#\\n\\nsection intro {\\n\\tmessage hello\\n}\\n\\nsection iapp {\\n\\tchoice strictUpdates default \\\"enabled\\\" {\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice appStats default \\\"enabled\\\" {\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tstring mode display \\\"large\\\" default \\\"auto\\\"\\n\\tstring logLevel display \\\"large\\\" default \\\"7\\\"\\n\\tstring routeDomain display \\\"large\\\" default \\\"auto\\\"\\n\\tchoice asmDeployMode display \\\"large\\\" default \\\"preserve-bypass\\\" {\\n\\t\\t\\\"preserve-bypass\\\",\\n\\t\\t\\\"preserve-block\\\",\\n\\t\\t\\\"redeploy-bypass\\\",\\n\\t\\t\\\"redeploy-block\\\"\\n\\t}\\n\\tchoice apmDeployMode display \\\"large\\\" default \\\"preserve-bypass\\\" {\\n\\t\\t\\\"preserve-bypass\\\",\\n\\t\\t\\\"preserve-block\\\",\\n\\t\\t\\\"redeploy-bypass\\\",\\n\\t\\t\\\"redeploy-block\\\"\\n\\t}\\n}\\n\\nsection pool {\\n\\tstring addr required display \\\"large\\\" validator \\\"IpAddress\\\" default \\\"\\\"\\n\\tstring mask required display \\\"large\\\" validator \\\"IpAddress\\\" default \\\"255.255.255.255\\\"\\n\\tstring port required display \\\"small\\\" validator \\\"PortNumber\\\" default \\\"\\\"\\n\\tstring DefaultPoolIndex display \\\"small\\\" validator \\\"NonNegativeNumber\\\" default \\\"0\\\"\\n\\ttable Pools {\\n\\t\\tstring Index display \\\"small\\\" validator \\\"NonNegativeNumber\\\" default \\\"0\\\"\\n\\t\\tstring Name display \\\"medium\\\" default \\\"\\\"\\n\\t\\tstring Description display \\\"medium\\\" default \\\"\\\"\\n\\t\\tchoice LbMethod display \\\"medium\\\" default \\\"round-robin\\\" {\\n\\t\\t\\t\\\"dynamic-ratio-member\\\",\\n\\t\\t\\t\\\"dynamic-ratio-node\\\",\\n\\t\\t\\t\\\"fastest-app-response\\\",\\n\\t\\t\\t\\\"fastest-node\\\",\\n\\t\\t\\t\\\"least-connections-member\\\",\\n\\t\\t\\t\\\"least-connections-node\\\",\\n\\t\\t\\t\\\"least-sessions\\\",\\n\\t\\t\\t\\\"observed-member\\\",\\n\\t\\t\\t\\\"observed-node\\\",\\n\\t\\t\\t\\\"predictive-member\\\",\\n\\t\\t\\t\\\"predictive-node\\\",\\n\\t\\t\\t\\\"round-robin\\\",\\n\\t\\t\\t\\\"ratio-member\\\",\\n\\t\\t\\t\\\"ratio-node\\\",\\n\\t\\t\\t\\\"ratio-session\\\",\\n\\t\\t\\t\\\"ratio-least-connections-member\\\",\\n\\t\\t\\t\\\"ratio-least-connections-node\\\",\\n\\t\\t\\t\\\"weighted-least-connections-member\\\"\\n\\t\\t}\\n\\t\\tstring Monitor display \\\"medium\\\" default \\\"\\\"\\n\\t\\tstring AdvOptions display \\\"medium\\\" default \\\"\\\"\\n\\t}\\n\\tstring MemberDefaultPort display \\\"small\\\" default \\\"\\\"\\n\\ttable Members {\\n\\t\\tstring Index display \\\"small\\\" validator \\\"NonNegativeNumber\\\" default \\\"0\\\"\\n\\t\\teditchoice IPAddress display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list ltm node]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\t\\tstring Port display \\\"small\\\" default \\\"80\\\"\\n\\t\\tstring ConnectionLimit display \\\"medium\\\" default \\\"0\\\"\\n\\t\\tstring Ratio display \\\"small\\\" default \\\"1\\\"\\n\\t\\tstring PriorityGroup display \\\"small\\\" default \\\"0\\\"\\n\\t\\tchoice State display \\\"large\\\"  default \\\"enabled\\\" {\\n\\t\\t\\t\\\"enabled\\\",\\n\\t\\t\\t\\\"drain-disabled\\\",\\n\\t\\t\\t\\\"disabled\\\"\\n\\t\\t}\\n\\t\\tstring AdvOptions display \\\"medium\\\"\\n\\t}\\n}\\n\\nsection monitor {\\n\\ttable Monitors {\\n\\t\\tstring Index display \\\"small\\\" validator \\\"NonNegativeNumber\\\" default \\\"0\\\"\\n\\t\\tstring Name display \\\"medium\\\" default \\\"\\\"\\n\\t\\tstring Type display \\\"medium\\\" default \\\"\\\"\\n\\t\\tstring Options display \\\"medium\\\" default \\\"\\\"\\n\\t}\\n}\\n\\nsection vs {\\n\\ttable Listeners {\\n\\t\\tstring Listener display \\\"large\\\"\\n\\t\\tstring Destination display \\\"medium\\\" default \\\"\\\"\\n\\t}\\n\\tstring Name display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring Description display \\\"xxlarge\\\" default \\\"\\\"\\n\\tchoice RouteAdv display \\\"medium\\\" default \\\"disabled\\\" {\\n\\t\\t\\\"disabled\\\",\\n\\t\\t\\\"all_vs\\\",\\n\\t\\t\\\"any_vs\\\",\\n\\t\\t\\\"always\\\"\\n\\t}\\n\\tstring SourceAddress display \\\"large\\\" default \\\"0.0.0.0/0\\\"\\n\\tstring IpProtocol display \\\"small\\\" default \\\"tcp\\\"\\n\\tstring ConnectionLimit display \\\"medium\\\" default \\\"0\\\"\\n\\teditchoice ProfileClientProtocol display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile tcp} {ltm profile udp} {ltm profile fastl4}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileServerProtocol display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile tcp} {ltm profile udp} {ltm profile fastl4}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileHTTP display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile http}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileOneConnect display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile one-connect}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileCompression display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile http-compression}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\tstring ProfileAnalytics display \\\"large\\\" default \\\"\\\"\\n\\teditchoice ProfileRequestLogging display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile request-log}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileDefaultPersist display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm persistence cookie} {ltm persistence dest-addr} {ltm persistence hash} {ltm persistence msrdp} {ltm persistence sip} {ltm persistence source-addr} {ltm persistence ssl} {ltm persistence universal}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileFallbackPersist display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm persistence cookie} {ltm persistence dest-addr} {ltm persistence hash} {ltm persistence msrdp} {ltm persistence sip} {ltm persistence source-addr} {ltm persistence ssl} {ltm persistence universal}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice SNATConfig display \\\"large\\\" default \\\"automap\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm snatpool}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileServerSSL display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile server-ssl}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileClientSSL display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm profile client-ssl}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileClientSSLCert display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {sys file ssl-cert}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileClientSSLKey display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {sys file ssl-key}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileClientSSLChain display \\\"large\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {sys file ssl-cert}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\tstring ProfileClientSSLCipherString display \\\"xxlarge\\\" default \\\"DEFAULT\\\"\\n\\tstring ProfileClientSSLAdvOptions display \\\"xxlarge\\\" default \\\"\\\"\\n\\teditchoice ProfileSecurityLogProfiles display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {security log profile}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileSecurityIPBlacklist display \\\"large\\\"  default \\\"none\\\" {\\n\\t\\t\\\"none\\\",\\n\\t\\t\\\"enabled-block\\\",\\n\\t\\t\\\"enabled-log\\\"\\n\\t}\\n\\teditchoice ProfileSecurityDoS display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {security dos profile}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileAccess display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {apm profile access}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\teditchoice ProfileConnectivity display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {apm profile connectivity}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\tstring ProfilePerRequest display \\\"xxlarge\\\" default \\\"\\\"\\n\\tchoice OptionSourcePort display \\\"large\\\"  default \\\"preserve\\\" {\\n\\t\\t\\\"preserve\\\",\\n\\t\\t\\\"preserve-strict\\\",\\n\\t\\t\\\"change\\\"\\n\\t}\\n\\tchoice OptionConnectionMirroring default \\\"disabled\\\" {\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\teditchoice Irules display \\\"xxlarge\\\" default \\\"\\\" tcl {\\n\\t\\ttmsh::cd /\\n\\t\\tset results \\\"\\\"\\n\\t    set cmds [list {ltm rule}]\\n\\t    foreach cmd $cmds {\\n\\t      set objs [list]\\n\\t      set objs_status [catch {tmsh::get_config $cmd recursive} objs]\\n\\t      if { $objs_status == 1 } { continue }\\n\\t      foreach obj $objs {\\n\\t      \\tset name [string map {\\\"\\\\\\\"\\\" \\\"\\\"} [tmsh::get_name $obj]]\\n\\t      \\tif { $name ne \\\"\\\" } {\\n\\t\\t        append results \\\"/$name\\\"\\n\\t\\t        append results \\\"\\\\n\\\"\\n\\t\\t    }\\n\\t      }\\n\\t    }\\n\\t    return $results\\n\\t}\\n\\t\\t\\n\\ttable BundledItems {\\n\\t\\teditchoice Resource display \\\"large\\\"  {\\n\\t\\t\\t\\\"** no bundled items **\\\"\\n\\t\\t}\\n\\t}\\n\\tstring AdvOptions display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring AdvProfiles display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring AdvPolicies display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring VirtualAddrAdvOptions display \\\"xxlarge\\\" default \\\"\\\"\\n}\\n\\nsection l7policy {\\n\\teditchoice strategy display \\\"large\\\" default \\\"/Common/first-match\\\" {\\n\\t\\t\\\"/Common/first-match\\\",\\n\\t\\t\\\"/Common/best-match\\\",\\n\\t\\t\\\"/Common/all-match\\\"\\n\\t}\\n\\tstring defaultASM display \\\"large\\\" default \\\"bypass\\\"\\n\\tstring defaultL7DOS display \\\"large\\\" default \\\"bypass\\\"\\n\\ttable rulesMatch {\\n\\t\\tstring Group display \\\"small\\\" default \\\"\\\"\\n\\t\\teditchoice Operand display \\\"xlarge\\\" {\\n\\t\\t\\t\\\"client-ssl/request/cipher\\\",\\n\\t\\t\\t\\\"client-ssl/request/cipher-bits\\\",\\n\\t\\t\\t\\\"client-ssl/request/protocol\\\",\\n\\t\\t\\t\\\"client-ssl/response/cipher\\\",\\n\\t\\t\\t\\\"client-ssl/response/cipher-bits\\\",\\n\\t\\t\\t\\\"client-ssl/response/protocol\\\",\\n\\t\\t\\t\\\"http-basic-auth/request/username\\\",\\n\\t\\t\\t\\\"http-basic-auth/request/password\\\",\\n\\t\\t\\t\\\"http-cookie/request/all/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-header/request/all/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-header/request/all/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-host/request/all\\\",\\n\\t\\t\\t\\\"http-host/request/host\\\",\\n\\t\\t\\t\\\"http-host/request/port\\\",\\n\\t\\t\\t\\\"http-method/request/all\\\",\\n\\t\\t\\t\\\"http-referer/request/all\\\",\\n\\t\\t\\t\\\"http-referer/request/extension\\\",\\n\\t\\t\\t\\\"http-referer/request/host\\\",\\n\\t\\t\\t\\\"http-referer/request/path\\\",\\n\\t\\t\\t\\\"http-referer/request/path-segment/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"http-referer/request/port\\\",\\n\\t\\t\\t\\\"http-referer/request/query-parameter/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-referer/request/scheme\\\",\\n\\t\\t\\t\\\"http-referer/request/unnamed-query-parameter/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/domain/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/expiry/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/path/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/value/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/version/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-status/response/all\\\",\\n\\t\\t\\t\\\"http-status/response/code\\\",\\n\\t\\t\\t\\\"http-status/response/text\\\",\\n\\t\\t\\t\\\"http-uri/request/all\\\",\\n\\t\\t\\t\\\"http-uri/request/extension\\\",\\n\\t\\t\\t\\\"http-uri/request/host\\\",\\n\\t\\t\\t\\\"http-uri/request/path\\\",\\n\\t\\t\\t\\\"http-uri/request/path-segment/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"http-uri/request/port\\\",\\n\\t\\t\\t\\\"http-uri/request/query-parameter/name/&lt;name&gt;\\\",\\n\\t\\t\\t\\\"http-uri/request/scheme\\\",\\n\\t\\t\\t\\\"http-uri/request/unnamed-query-parameter/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"http-version/request/all\\\",\\n\\t\\t\\t\\\"http-version/request/major\\\",\\n\\t\\t\\t\\\"http-version/request/minor\\\",\\n\\t\\t\\t\\\"http-version/request/protocol\\\",\\n\\t\\t\\t\\\"http-version/response/all\\\",\\n\\t\\t\\t\\\"http-version/response/major\\\",\\n\\t\\t\\t\\\"http-version/response/minor\\\",\\n\\t\\t\\t\\\"http-version/response/protocol\\\",\\n\\t\\t\\t\\\"ssl-cert/ssl-server-handshake/common-name/index/&lt;index&gt;\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-client-hello/alpn\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-client-hello/npn\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-client-hello/server-name\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-server-hello/alpn\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-server-hello/npn\\\",\\n\\t\\t\\t\\\"ssl-extension/ssl-server-hello/server-name\\\",\\n\\t\\t\\t\\\"tcp/request/mss/internal\\\",\\n\\t\\t\\t\\\"tcp/request/port/internal\\\",\\n\\t\\t\\t\\\"tcp/request/port/local\\\",\\n\\t\\t\\t\\\"tcp/request/route-domain/internal\\\",\\n\\t\\t\\t\\\"tcp/request/rtt/internal\\\",\\n\\t\\t\\t\\\"tcp/request/vlan/internal\\\",\\n\\t\\t\\t\\\"tcp/request/vlan-id/internal\\\"\\n\\t\\t}\\n\\t\\tchoice Negate display \\\"small\\\" default \\\"no\\\" {\\n\\t\\t\\t\\\"no\\\",\\n\\t\\t\\t\\\"yes\\\"\\n\\t\\t}\\n\\t\\tchoice Condition display \\\"large\\\" {\\n\\t\\t\\t\\\"equals\\\",\\n\\t\\t\\t\\\"starts-with\\\",\\n\\t\\t\\t\\\"ends-with\\\",\\n\\t\\t\\t\\\"contains\\\",\\n\\t\\t\\t\\\"greater\\\",\\n\\t\\t\\t\\\"greater-or-equal\\\",\\n\\t\\t\\t\\\"less\\\",\\n\\t\\t\\t\\\"less-or-equal\\\"\\n\\t\\t}\\n\\t\\tstring Value display \\\"large\\\" default \\\"\\\"\\n\\t\\tchoice CaseSensitive display \\\"small\\\" default \\\"no\\\" {\\n\\t\\t\\t\\\"no\\\",\\n\\t\\t\\t\\\"yes\\\"\\n\\t\\t}\\n\\t\\tchoice Missing display \\\"small\\\" default \\\"no\\\" {\\n\\t\\t\\t\\\"no\\\",\\n\\t\\t\\t\\\"yes\\\"\\n\\t\\t}\\n\\t}\\n\\ttable rulesAction {\\n\\t\\tstring Group display \\\"small\\\" default \\\"\\\"\\n\\t\\teditchoice Target display \\\"xlarge\\\" {\\n\\t\\t\\t\\\"asm/request/enable/policy\\\",\\n\\t\\t\\t\\\"asm/request/disable\\\",\\n\\t\\t\\t\\\"cache/request/enable/pin\\\",\\n\\t\\t\\t\\\"cache/request/disable\\\",\\n\\t\\t\\t\\\"cache/response/enable/pin\\\",\\n\\t\\t\\t\\\"cache/respones/disable\\\",\\n\\t\\t\\t\\\"compress/request/enable\\\",\\n\\t\\t\\t\\\"compress/request/disable\\\",\\n\\t\\t\\t\\\"compress/response/enable\\\",\\n\\t\\t\\t\\\"compress/response/disable\\\",\\n\\t\\t\\t\\\"decompress/request/enable\\\",\\n\\t\\t\\t\\\"decompress/request/disable\\\",\\n\\t\\t\\t\\\"decompress/response/enable\\\",\\n\\t\\t\\t\\\"decompress/response/disable\\\",\\n\\t\\t\\t\\\"forward/request/reset\\\",\\n\\t\\t\\t\\\"forward/request/select/clone-pool\\\",\\n\\t\\t\\t\\\"forward/request/select/member\\\",\\n\\t\\t\\t\\\"forward/request/select/nexthop\\\",\\n\\t\\t\\t\\\"forward/request/select/node\\\",\\n\\t\\t\\t\\\"forward/request/select/pool\\\",\\n\\t\\t\\t\\\"forward/request/select/rateclass\\\",\\n\\t\\t\\t\\\"forward/request/select/snat\\\",\\n\\t\\t\\t\\\"forward/request/select/snatpool\\\",\\n\\t\\t\\t\\\"forward/request/select/vlan\\\",\\n\\t\\t\\t\\\"forward/request/select/vlan-id\\\",\\n\\t\\t\\t\\\"http/request/enable\\\",\\n\\t\\t\\t\\\"http/request/disable\\\",\\n\\t\\t\\t\\\"http-cookie/request/insert/name,value\\\",\\n\\t\\t\\t\\\"http-cookie/request/remove/name\\\",\\n\\t\\t\\t\\\"http-header/request/insert/name,value\\\",\\n\\t\\t\\t\\\"http-header/request/remove/name\\\",\\n\\t\\t\\t\\\"http-header/request/replace/name,value\\\",\\n\\t\\t\\t\\\"http-header/response/insert/name,value\\\",\\n\\t\\t\\t\\\"http-header/response/remove/name\\\",\\n\\t\\t\\t\\\"http-header/response/replace/name,value\\\",\\n\\t\\t\\t\\\"http-host/request/replace/value\\\",\\n\\t\\t\\t\\\"http-referer/request/insert/value\\\",\\n\\t\\t\\t\\\"http-referer/request/remove\\\",\\n\\t\\t\\t\\\"http-referer/request/replace/value\\\",\\n\\t\\t\\t\\\"http-reply/request/redirect/location\\\",\\n\\t\\t\\t\\\"http-reply/response/redirect/location\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/insert/name,domain,path,value\\\",\\n\\t\\t\\t\\\"http-set-cookie/response/remove/name\\\",\\n\\t\\t\\t\\\"http-uri/response/replace/path,query-string,value\\\",\\n\\t\\t\\t\\\"l7dos/request/enable/from-profile\\\",\\n\\t\\t\\t\\\"l7dos/request/disable\\\",\\n\\t\\t\\t\\\"log/request/write/message\\\",\\n\\t\\t\\t\\\"log/response/write/message\\\",\\n\\t\\t\\t\\\"request-adapt/request/enable/internal-virtual-server\\\",\\n\\t\\t\\t\\\"request-adapt/request/disable\\\",\\n\\t\\t\\t\\\"request-adapt/response/enable/internal-virtual-server\\\",\\n\\t\\t\\t\\\"request-adapt/response/disable\\\",\\n\\t\\t\\t\\\"response-adapt/request/enable/internal-virtual-server\\\",\\n\\t\\t\\t\\\"response-adapt/request/disable\\\",\\n\\t\\t\\t\\\"response-adapt/response/enable/internal-virtual-server\\\",\\n\\t\\t\\t\\\"request-adapt/response/disable\\\",\\n\\t\\t\\t\\\"server-ssl/request/enable\\\",\\n\\t\\t\\t\\\"server-ssl/request/disable\\\",\\n\\t\\t\\t\\\"tcl/request/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcl/response/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcl/ssl-client-hello/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcl/ssl-server-handshake/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcl/ssl-server-hello/set-variable/name,expression\\\",\\n\\t\\t\\t\\\"tcp-nagle/request/enable\\\",\\n\\t\\t\\t\\\"tcp-nagle/request/disable\\\"\\n\\t\\t}\\n\\t\\tstring Parameter display \\\"large\\\" default \\\"\\\"\\n\\t}\\n}\\n\\nsection feature {\\n\\tchoice statsTLS display \\\"medium\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice statsHTTP display \\\"medium\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice insertXForwardedFor display \\\"medium\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice redirectToHTTPS display \\\"medium\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\tchoice sslEasyCipher display \\\"medium\\\" default \\\"disabled\\\" {\\n\\t\\t\\\"compatible\\\",\\n\\t\\t\\\"medium\\\",\\n\\t\\t\\\"high\\\",\\n\\t\\t\\\"tls_1.2\\\",\\n\\t\\t\\\"tls_1.1+1.2\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\teditchoice securityEnableHSTS display \\\"xlarge\\\" default \\\"disabled\\\" {\\n\\t\\t\\\"disabled\\\",\\n\\t\\t\\\"enabled\\\",\\n\\t\\t\\\"enabled-preload\\\",\\n\\t\\t\\\"enabled-subdomain\\\",\\n\\t\\t\\\"enabled-preload-subdomain\\\"\\n\\t}\\n\\tchoice easyL4Firewall display \\\"xlarge\\\" default \\\"auto\\\" {\\n\\t\\t\\\"auto\\\",\\n\\t\\t\\\"base\\\",\\n\\t\\t\\\"base+ip_blacklist_block\\\",\\n\\t\\t\\\"base+ip_blacklist_log\\\",\\n\\t\\t\\\"disabled\\\"\\n\\t}\\n\\ttable easyL4FirewallBlacklist {\\n\\t\\tstring CIDRRange display \\\"large\\\"\\n\\t}\\n\\ttable easyL4FirewallSourceList {\\n\\t\\tstring CIDRRange display \\\"large\\\" default \\\"0.0.0.0/0\\\"\\n\\t}\\n}\\n\\nsection extensions {\\n\\tstring Field1 display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring Field2 display \\\"xxlarge\\\" default \\\"\\\"\\n\\tstring Field3 display \\\"xxlarge\\\" default \\\"\\\"\\n}\\n\\n\\ntext {\\n\\tintro \\\"F5 Application Services Integration iApp v2.0.003 (Community Edition)\\\"\\n\\tintro.hello \\\"Introduction\\\" \\\"Please complete the following template\\\"\\n\\n\\tiapp \\\"iApp Options\\\"\\n\\tiapp.strictUpdates \\\"iApp: Strict Updates\\\"\\n\\tiapp.appStats \\\"iApp: Statistics Handler Creation\\\"\\n\\tiapp.mode \\\"iApp: Mode\\\"\\n\\tiapp.logLevel \\\"iApp: Log Level\\\"\\n\\tiapp.routeDomain \\\"iApp: Route Domain\\\"\\n\\tiapp.asmDeployMode \\\"iApp: ASM: Deployment Mode\\\"\\n\\tiapp.apmDeployMode \\\"iApp: APM: Deployment Mode\\\"\\n\\n\\tpool \\\"Virtual Server Listener & Pool Configuration\\\"\\n\\tpool.addr \\\"Virtual Server: Address\\\"\\n\\tpool.mask \\\"Virtual Server: Mask\\\"\\n\\tpool.port \\\"Virtual Server: Port\\\"\\n\\tpool.DefaultPoolIndex \\\"Virtual Server: Default Pool Index\\\"\\n\\tpool.Pools \\\"Pool: Pool Table\\\"\\n\\tpool.Pools.Index \\\"Index:\\\"\\n\\tpool.Pools.Name \\\"Name:\\\"\\n\\tpool.Pools.Description \\\"Description:\\\"\\n\\tpool.Pools.LbMethod \\\"LB Method:\\\"\\n\\tpool.Pools.Monitor \\\"Monitor(s):\\\"\\n\\tpool.Pools.AdvOptions \\\"Adv Options:\\\"\\n\\tpool.MemberDefaultPort \\\"Pool: Member Default Port\\\"\\n\\tpool.Members \\\"Pool: Members\\\"\\n\\tpool.Members.Index \\\"Pool Idx:\\\"\\n\\tpool.Members.IPAddress \\\"IP/Node Name:\\\"\\n\\tpool.Members.Port \\\"Port:\\\"\\n\\tpool.Members.ConnectionLimit \\\"Connection Limit:\\\"\\n\\tpool.Members.Ratio \\\"Ratio:\\\"\\n\\tpool.Members.PriorityGroup \\\"Priority Group:\\\"\\n\\tpool.Members.State \\\"State:\\\"\\n\\tpool.Members.AdvOptions \\\"Adv Options:\\\"\\n\\n\\tmonitor \\\"Pool Monitor(s) Configuration\\\"\\n\\tmonitor.Monitors \\\"Monitor: Monitor Table\\\"\\n\\tmonitor.Monitors.Index \\\"Index:\\\"\\n\\tmonitor.Monitors.Name \\\"Name:\\\"\\n\\tmonitor.Monitors.Type \\\"Type:\\\"\\n\\tmonitor.Monitors.Options \\\"Options:\\\"\\n\\n\\tvs \\\"Virtual Server Configuration\\\"\\n\\tvs.Listeners \\\"Virtual Server: Additional Listeners\\\"\\n\\tvs.Listeners.Listener \\\"Listener:\\\"\\n\\tvs.Listeners.Destination \\\"Destination\\\"\\n\\tvs.Name \\\"Virtual Server: Name\\\"\\n\\tvs.Description \\\"Virtual Server: Description\\\"\\n\\tvs.RouteAdv \\\"Virtual Server: Route Advertisement\\\"\\n\\tvs.SourceAddress \\\"Virtual Server: Source Address\\\"\\n\\tvs.IpProtocol \\\"Virtual Server: IP Protocol\\\"\\n\\tvs.ConnectionLimit \\\"Virtual Server: Virtual Server Connection Limit (0=unlimited)\\\"\\n\\tvs.ProfileClientProtocol \\\"Virtual Server: Client-side L4 Protocol Profile\\\"\\n\\tvs.ProfileServerProtocol \\\"Virtual Server: Server-side L4 Protocol Profile\\\"\\n\\tvs.ProfileHTTP \\\"Virtual Server: HTTP Profile\\\"\\n\\tvs.ProfileOneConnect \\\"Virtual Server: OneConnect Profile\\\"\\n\\tvs.ProfileCompression \\\"Virtual Server: Compression Profile\\\"\\n\\tvs.ProfileAnalytics \\\"Virtual Server: Analytics Profile\\\"\\n\\tvs.ProfileRequestLogging \\\"Virtual Server: Request Logging Profile\\\"\\n\\tvs.ProfileDefaultPersist \\\"Virtual Server: Default Persistence Profile\\\"\\n\\tvs.ProfileFallbackPersist \\\"Virtual Server: Fallback Persistence Profile\\\"\\n\\tvs.SNATConfig \\\"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\\\"\\n\\tvs.ProfileServerSSL \\\"Virtual Server: Server SSL Profile\\\"\\n\\tvs.ProfileClientSSL \\\"Virtual Server: Client SSL Profile\\\"\\n\\tvs.ProfileClientSSLCert \\\"Virtual Server: Client SSL Certificate\\\"\\n\\tvs.ProfileClientSSLKey \\\"Virtual Server: Client SSL Key\\\"\\n\\tvs.ProfileClientSSLChain \\\"Virtual Server: Client SSL Certificate Chain\\\"\\n\\tvs.ProfileClientSSLCipherString \\\"Virtual Server: Client SSL Cipher String\\\"\\n\\tvs.ProfileClientSSLAdvOptions \\\"Virtual Server: Client SSL Advanced Options\\\"\\n\\tvs.ProfileSecurityLogProfiles \\\"Virtual Server: Security Logging Profiles\\\"\\n\\tvs.ProfileSecurityIPBlacklist \\\"Virtual Server: IP Blacklist Profile\\\"\\n\\tvs.ProfileSecurityDoS \\\"Virtual Server: Security: DoS Profile\\\"\\n\\tvs.ProfileAccess \\\"Virtual Server: Access Profile\\\"\\n\\tvs.ProfileConnectivity \\\"Virtual Server: Connectivity Profile\\\"\\n\\tvs.ProfilePerRequest \\\"Virtual Server: Per-Request Profile\\\"\\n\\tvs.OptionSourcePort \\\"Virtual Server: Source Port Behavior\\\"\\n\\tvs.OptionConnectionMirroring \\\"Virtual Server: Connection Mirroring\\\"\\n\\tvs.Irules \\\"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\\\"\\n\\tvs.BundledItems \\\"Virtual Server: Bundled Items\\\"\\n\\tvs.BundledItems.Resource \\\"Resource:\\\"\\n\\tvs.AdvOptions \\\"Virtual Server: Advanced Options\\\"\\n\\tvs.AdvProfiles \\\"Virtual Server: Advanced Profiles\\\"\\n\\tvs.AdvPolicies \\\"Virtual Server: Advanced Policies\\\"\\n\\tvs.VirtualAddrAdvOptions \\\"Virtual Address: Advanced Options\\\"\\n\\n\\tl7policy \\\"L7 Traffic Policy\\\"\\n\\tl7policy.strategy \\\"L7 Policy: Match Strategy\\\"\\n\\tl7policy.defaultASM \\\"L7 Policy: Default ASM Policy\\\"\\n\\tl7policy.defaultL7DOS \\\"L7 Policy: Default L7 DoS Policy\\\"\\n\\tl7policy.rulesMatch \\\"L7 Policy: Rules: Matching\\\"\\n\\tl7policy.rulesMatch.Group \\\"Group:\\\"\\n\\tl7policy.rulesMatch.Operand \\\"Operand:\\\"\\n\\tl7policy.rulesMatch.Negate \\\"Negate:\\\"\\n\\tl7policy.rulesMatch.Condition \\\"Condition:\\\"\\n\\tl7policy.rulesMatch.Value \\\"Value:\\\"\\n\\tl7policy.rulesMatch.CaseSensitive \\\"Case Sensitive:\\\"\\n\\tl7policy.rulesMatch.Missing \\\"Missing:\\\"\\n\\tl7policy.rulesAction \\\"L7 Policy: Rules: Action\\\"\\n\\tl7policy.rulesAction.Group \\\"Group:\\\"\\n\\tl7policy.rulesAction.Target \\\"Target:\\\"\\n\\tl7policy.rulesAction.Parameter \\\"Parameter:\\\"\\n\\n\\tfeature \\\"L4-7 Helpers\\\"\\n\\tfeature.statsTLS \\\"TLS/SSL: Stats Reporting\\\"\\n\\tfeature.statsHTTP \\\"HTTP: Stats Reporting\\\"\\n\\tfeature.insertXForwardedFor \\\"HTTP: Insert X-Forwarded-For Header\\\"\\n\\tfeature.redirectToHTTPS \\\"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\\\"\\n\\tfeature.sslEasyCipher \\\"TLS/SSL: Easy Cipher String (overrides VS section setting)\\\"\\n\\tfeature.securityEnableHSTS \\\"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\\\"\\n\\tfeature.easyL4Firewall \\\"Security: Firewall: Configure L4 Firewall Policy\\\"\\n\\tfeature.easyL4FirewallBlacklist \\\"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\\\"\\n\\tfeature.easyL4FirewallBlacklist.CIDRRange \\\"CIDR Block:\\\"\\n\\tfeature.easyL4FirewallSourceList \\\"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\\\"\\n\\tfeature.easyL4FirewallSourceList.CIDRRange \\\"CIDR Block:\\\"\\n\\n\\textensions \\\"Custom Extensions Section\\\"\\n\\textensions.Field1 \\\"Extensions: Field 1\\\"\\n\\textensions.Field2 \\\"Extensions: Field 2\\\"\\n\\textensions.Field3 \\\"Extensions: Field 3\\\"\\n\\n}\\n            }\\n            role-acl none\\n            run-as none\\n        }\\n    }\\n    description none\\n    ignore-verification false\\n    requires-bigip-version-max none\\n    requires-bigip-version-min none\\n    requires-modules { ltm }\\n    signing-key none\\n    tmpl-checksum none\\n    tmpl-signature none\\n}\\n\", \"template\": {\"tables\": [{\"displayName\": \"Pools\", \"name\": \"pool__Pools\", \"section\": \"pool\", \"isRequired\": false, \"columns\": [{\"displayName\": \"Index\", \"name\": \"Index\", \"section\": null, \"isRequired\": false, \"defaultValue\": \"0\", \"description\": \"Index:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"Name\", \"name\": \"Name\", \"description\": \"Name:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"Description\", \"name\": \"Description\", \"description\": \"Description:\"}, {\"displayName\": \"LbMethod\", \"name\": \"LbMethod\", \"section\": null, \"choices\": [{\"description\": \"dynamic-ratio-member\", \"value\": \"dynamic-ratio-member\"}, {\"description\": \"dynamic-ratio-node\", \"value\": \"dynamic-ratio-node\"}, {\"description\": \"fastest-app-response\", \"value\": \"fastest-app-response\"}, {\"description\": \"fastest-node\", \"value\": \"fastest-node\"}, {\"description\": \"least-connections-member\", \"value\": \"least-connections-member\"}, {\"description\": \"least-connections-node\", \"value\": \"least-connections-node\"}, {\"description\": \"least-sessions\", \"value\": \"least-sessions\"}, {\"description\": \"observed-member\", \"value\": \"observed-member\"}, {\"description\": \"observed-node\", \"value\": \"observed-node\"}, {\"description\": \"predictive-member\", \"value\": \"predictive-member\"}, {\"description\": \"predictive-node\", \"value\": \"predictive-node\"}, {\"description\": \"round-robin\", \"value\": \"round-robin\"}, {\"description\": \"ratio-member\", \"value\": \"ratio-member\"}, {\"description\": \"ratio-node\", \"value\": \"ratio-node\"}, {\"description\": \"ratio-session\", \"value\": \"ratio-session\"}, {\"description\": \"ratio-least-connections-member\", \"value\": \"ratio-least-connections-member\"}, {\"description\": \"ratio-least-connections-node\", \"value\": \"ratio-least-connections-node\"}, {\"description\": \"weighted-least-connections-member\", \"value\": \"weighted-least-connections-member\"}], \"isRequired\": false, \"defaultValue\": \"round-robin\", \"description\": \"LB Method:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"Monitor\", \"name\": \"Monitor\", \"description\": \"Monitor(s):\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"AdvOptions\", \"name\": \"AdvOptions\", \"description\": \"Adv Options:\"}], \"description\": \"Pool: Pool Table\"}, {\"displayName\": \"Members\", \"name\": \"pool__Members\", \"section\": \"pool\", \"isRequired\": false, \"columns\": [{\"displayName\": \"Index\", \"name\": \"Index\", \"section\": null, \"isRequired\": false, \"defaultValue\": \"0\", \"description\": \"Pool Idx:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"IPAddress\", \"name\": \"IPAddress\", \"description\": \"IP/Node Name:\"}, {\"displayName\": \"Port\", \"name\": \"Port\", \"section\": null, \"isRequired\": false, \"defaultValue\": \"80\", \"description\": \"Port:\"}, {\"displayName\": \"ConnectionLimit\", \"name\": \"ConnectionLimit\", \"section\": null, \"isRequired\": false, \"defaultValue\": \"0\", \"description\": \"Connection Limit:\"}, {\"displayName\": \"Ratio\", \"name\": \"Ratio\", \"section\": null, \"isRequired\": false, \"defaultValue\": \"1\", \"description\": \"Ratio:\"}, {\"displayName\": \"PriorityGroup\", \"name\": \"PriorityGroup\", \"section\": null, \"isRequired\": false, \"defaultValue\": \"0\", \"description\": \"Priority Group:\"}, {\"displayName\": \"State\", \"name\": \"State\", \"section\": null, \"choices\": [{\"description\": \"enabled\", \"value\": \"enabled\"}, {\"description\": \"drain-disabled\", \"value\": \"drain-disabled\"}, {\"description\": \"disabled\", \"value\": \"disabled\"}], \"isRequired\": false, \"defaultValue\": \"enabled\", \"description\": \"State:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"AdvOptions\", \"name\": \"AdvOptions\", \"description\": \"Adv Options:\"}], \"description\": \"Pool: Members\"}, {\"displayName\": \"Monitors\", \"name\": \"monitor__Monitors\", \"section\": \"monitor\", \"isRequired\": false, \"columns\": [{\"displayName\": \"Index\", \"name\": \"Index\", \"section\": null, \"isRequired\": false, \"defaultValue\": \"0\", \"description\": \"Index:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"Name\", \"name\": \"Name\", \"description\": \"Name:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"Type\", \"name\": \"Type\", \"description\": \"Type:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"Options\", \"name\": \"Options\", \"description\": \"Options:\"}], \"description\": \"Monitor: Monitor Table\"}, {\"displayName\": \"Listeners\", \"name\": \"vs__Listeners\", \"section\": \"vs\", \"isRequired\": false, \"columns\": [{\"isRequired\": false, \"section\": null, \"displayName\": \"Listener\", \"name\": \"Listener\", \"description\": \"Listener:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"Destination\", \"name\": \"Destination\", \"description\": \"Destination\"}], \"description\": \"Virtual Server: Additional Listeners\"}, {\"displayName\": \"BundledItems\", \"name\": \"vs__BundledItems\", \"section\": \"vs\", \"isRequired\": false, \"columns\": [{\"displayName\": \"Resource\", \"name\": \"Resource\", \"section\": null, \"choices\": [{\"description\": \"** no bundled items **\", \"value\": \"** no bundled items **\"}], \"isRequired\": false, \"description\": \"Resource:\"}], \"description\": \"Virtual Server: Bundled Items\"}, {\"displayName\": \"rulesMatch\", \"name\": \"l7policy__rulesMatch\", \"section\": \"l7policy\", \"isRequired\": false, \"columns\": [{\"isRequired\": false, \"section\": null, \"displayName\": \"Group\", \"name\": \"Group\", \"description\": \"Group:\"}, {\"displayName\": \"Operand\", \"name\": \"Operand\", \"section\": null, \"choices\": [{\"description\": \"client-ssl/request/cipher\", \"value\": \"client-ssl/request/cipher\"}, {\"description\": \"client-ssl/request/cipher-bits\", \"value\": \"client-ssl/request/cipher-bits\"}, {\"description\": \"client-ssl/request/protocol\", \"value\": \"client-ssl/request/protocol\"}, {\"description\": \"client-ssl/response/cipher\", \"value\": \"client-ssl/response/cipher\"}, {\"description\": \"client-ssl/response/cipher-bits\", \"value\": \"client-ssl/response/cipher-bits\"}, {\"description\": \"client-ssl/response/protocol\", \"value\": \"client-ssl/response/protocol\"}, {\"description\": \"http-basic-auth/request/username\", \"value\": \"http-basic-auth/request/username\"}, {\"description\": \"http-basic-auth/request/password\", \"value\": \"http-basic-auth/request/password\"}, {\"description\": \"http-cookie/request/all/name/<name>\", \"value\": \"http-cookie/request/all/name/<name>\"}, {\"description\": \"http-header/request/all/name/<name>\", \"value\": \"http-header/request/all/name/<name>\"}, {\"description\": \"http-header/request/all/name/<name>\", \"value\": \"http-header/request/all/name/<name>\"}, {\"description\": \"http-host/request/all\", \"value\": \"http-host/request/all\"}, {\"description\": \"http-host/request/host\", \"value\": \"http-host/request/host\"}, {\"description\": \"http-host/request/port\", \"value\": \"http-host/request/port\"}, {\"description\": \"http-method/request/all\", \"value\": \"http-method/request/all\"}, {\"description\": \"http-referer/request/all\", \"value\": \"http-referer/request/all\"}, {\"description\": \"http-referer/request/extension\", \"value\": \"http-referer/request/extension\"}, {\"description\": \"http-referer/request/host\", \"value\": \"http-referer/request/host\"}, {\"description\": \"http-referer/request/path\", \"value\": \"http-referer/request/path\"}, {\"description\": \"http-referer/request/path-segment/index/<index>\", \"value\": \"http-referer/request/path-segment/index/<index>\"}, {\"description\": \"http-referer/request/port\", \"value\": \"http-referer/request/port\"}, {\"description\": \"http-referer/request/query-parameter/name/<name>\", \"value\": \"http-referer/request/query-parameter/name/<name>\"}, {\"description\": \"http-referer/request/scheme\", \"value\": \"http-referer/request/scheme\"}, {\"description\": \"http-referer/request/unnamed-query-parameter/index/<index>\", \"value\": \"http-referer/request/unnamed-query-parameter/index/<index>\"}, {\"description\": \"http-set-cookie/response/domain/name/<name>\", \"value\": \"http-set-cookie/response/domain/name/<name>\"}, {\"description\": \"http-set-cookie/response/expiry/name/<name>\", \"value\": \"http-set-cookie/response/expiry/name/<name>\"}, {\"description\": \"http-set-cookie/response/path/name/<name>\", \"value\": \"http-set-cookie/response/path/name/<name>\"}, {\"description\": \"http-set-cookie/response/value/name/<name>\", \"value\": \"http-set-cookie/response/value/name/<name>\"}, {\"description\": \"http-set-cookie/response/version/name/<name>\", \"value\": \"http-set-cookie/response/version/name/<name>\"}, {\"description\": \"http-status/response/all\", \"value\": \"http-status/response/all\"}, {\"description\": \"http-status/response/code\", \"value\": \"http-status/response/code\"}, {\"description\": \"http-status/response/text\", \"value\": \"http-status/response/text\"}, {\"description\": \"http-uri/request/all\", \"value\": \"http-uri/request/all\"}, {\"description\": \"http-uri/request/extension\", \"value\": \"http-uri/request/extension\"}, {\"description\": \"http-uri/request/host\", \"value\": \"http-uri/request/host\"}, {\"description\": \"http-uri/request/path\", \"value\": \"http-uri/request/path\"}, {\"description\": \"http-uri/request/path-segment/index/<index>\", \"value\": \"http-uri/request/path-segment/index/<index>\"}, {\"description\": \"http-uri/request/port\", \"value\": \"http-uri/request/port\"}, {\"description\": \"http-uri/request/query-parameter/name/<name>\", \"value\": \"http-uri/request/query-parameter/name/<name>\"}, {\"description\": \"http-uri/request/scheme\", \"value\": \"http-uri/request/scheme\"}, {\"description\": \"http-uri/request/unnamed-query-parameter/index/<index>\", \"value\": \"http-uri/request/unnamed-query-parameter/index/<index>\"}, {\"description\": \"http-version/request/all\", \"value\": \"http-version/request/all\"}, {\"description\": \"http-version/request/major\", \"value\": \"http-version/request/major\"}, {\"description\": \"http-version/request/minor\", \"value\": \"http-version/request/minor\"}, {\"description\": \"http-version/request/protocol\", \"value\": \"http-version/request/protocol\"}, {\"description\": \"http-version/response/all\", \"value\": \"http-version/response/all\"}, {\"description\": \"http-version/response/major\", \"value\": \"http-version/response/major\"}, {\"description\": \"http-version/response/minor\", \"value\": \"http-version/response/minor\"}, {\"description\": \"http-version/response/protocol\", \"value\": \"http-version/response/protocol\"}, {\"description\": \"ssl-cert/ssl-server-handshake/common-name/index/<index>\", \"value\": \"ssl-cert/ssl-server-handshake/common-name/index/<index>\"}, {\"description\": \"ssl-extension/ssl-client-hello/alpn\", \"value\": \"ssl-extension/ssl-client-hello/alpn\"}, {\"description\": \"ssl-extension/ssl-client-hello/npn\", \"value\": \"ssl-extension/ssl-client-hello/npn\"}, {\"description\": \"ssl-extension/ssl-client-hello/server-name\", \"value\": \"ssl-extension/ssl-client-hello/server-name\"}, {\"description\": \"ssl-extension/ssl-server-hello/alpn\", \"value\": \"ssl-extension/ssl-server-hello/alpn\"}, {\"description\": \"ssl-extension/ssl-server-hello/npn\", \"value\": \"ssl-extension/ssl-server-hello/npn\"}, {\"description\": \"ssl-extension/ssl-server-hello/server-name\", \"value\": \"ssl-extension/ssl-server-hello/server-name\"}, {\"description\": \"tcp/request/mss/internal\", \"value\": \"tcp/request/mss/internal\"}, {\"description\": \"tcp/request/port/internal\", \"value\": \"tcp/request/port/internal\"}, {\"description\": \"tcp/request/port/local\", \"value\": \"tcp/request/port/local\"}, {\"description\": \"tcp/request/route-domain/internal\", \"value\": \"tcp/request/route-domain/internal\"}, {\"description\": \"tcp/request/rtt/internal\", \"value\": \"tcp/request/rtt/internal\"}, {\"description\": \"tcp/request/vlan/internal\", \"value\": \"tcp/request/vlan/internal\"}, {\"description\": \"tcp/request/vlan-id/internal\", \"value\": \"tcp/request/vlan-id/internal\"}], \"isRequired\": false, \"description\": \"Operand:\"}, {\"displayName\": \"Negate\", \"name\": \"Negate\", \"section\": null, \"choices\": [{\"description\": \"no\", \"value\": \"no\"}, {\"description\": \"yes\", \"value\": \"yes\"}], \"isRequired\": false, \"defaultValue\": \"no\", \"description\": \"Negate:\"}, {\"displayName\": \"Condition\", \"name\": \"Condition\", \"section\": null, \"choices\": [{\"description\": \"equals\", \"value\": \"equals\"}, {\"description\": \"starts-with\", \"value\": \"starts-with\"}, {\"description\": \"ends-with\", \"value\": \"ends-with\"}, {\"description\": \"contains\", \"value\": \"contains\"}, {\"description\": \"greater\", \"value\": \"greater\"}, {\"description\": \"greater-or-equal\", \"value\": \"greater-or-equal\"}, {\"description\": \"less\", \"value\": \"less\"}, {\"description\": \"less-or-equal\", \"value\": \"less-or-equal\"}], \"isRequired\": false, \"description\": \"Condition:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"Value\", \"name\": \"Value\", \"description\": \"Value:\"}, {\"displayName\": \"CaseSensitive\", \"name\": \"CaseSensitive\", \"section\": null, \"choices\": [{\"description\": \"no\", \"value\": \"no\"}, {\"description\": \"yes\", \"value\": \"yes\"}], \"isRequired\": false, \"defaultValue\": \"no\", \"description\": \"Case Sensitive:\"}, {\"displayName\": \"Missing\", \"name\": \"Missing\", \"section\": null, \"choices\": [{\"description\": \"no\", \"value\": \"no\"}, {\"description\": \"yes\", \"value\": \"yes\"}], \"isRequired\": false, \"defaultValue\": \"no\", \"description\": \"Missing:\"}], \"description\": \"L7 Policy: Rules: Matching\"}, {\"displayName\": \"rulesAction\", \"name\": \"l7policy__rulesAction\", \"section\": \"l7policy\", \"isRequired\": false, \"columns\": [{\"isRequired\": false, \"section\": null, \"displayName\": \"Group\", \"name\": \"Group\", \"description\": \"Group:\"}, {\"displayName\": \"Target\", \"name\": \"Target\", \"section\": null, \"choices\": [{\"description\": \"asm/request/enable/policy\", \"value\": \"asm/request/enable/policy\"}, {\"description\": \"asm/request/disable\", \"value\": \"asm/request/disable\"}, {\"description\": \"cache/request/enable/pin\", \"value\": \"cache/request/enable/pin\"}, {\"description\": \"cache/request/disable\", \"value\": \"cache/request/disable\"}, {\"description\": \"cache/response/enable/pin\", \"value\": \"cache/response/enable/pin\"}, {\"description\": \"cache/respones/disable\", \"value\": \"cache/respones/disable\"}, {\"description\": \"compress/request/enable\", \"value\": \"compress/request/enable\"}, {\"description\": \"compress/request/disable\", \"value\": \"compress/request/disable\"}, {\"description\": \"compress/response/enable\", \"value\": \"compress/response/enable\"}, {\"description\": \"compress/response/disable\", \"value\": \"compress/response/disable\"}, {\"description\": \"decompress/request/enable\", \"value\": \"decompress/request/enable\"}, {\"description\": \"decompress/request/disable\", \"value\": \"decompress/request/disable\"}, {\"description\": \"decompress/response/enable\", \"value\": \"decompress/response/enable\"}, {\"description\": \"decompress/response/disable\", \"value\": \"decompress/response/disable\"}, {\"description\": \"forward/request/reset\", \"value\": \"forward/request/reset\"}, {\"description\": \"forward/request/select/clone-pool\", \"value\": \"forward/request/select/clone-pool\"}, {\"description\": \"forward/request/select/member\", \"value\": \"forward/request/select/member\"}, {\"description\": \"forward/request/select/nexthop\", \"value\": \"forward/request/select/nexthop\"}, {\"description\": \"forward/request/select/node\", \"value\": \"forward/request/select/node\"}, {\"description\": \"forward/request/select/pool\", \"value\": \"forward/request/select/pool\"}, {\"description\": \"forward/request/select/rateclass\", \"value\": \"forward/request/select/rateclass\"}, {\"description\": \"forward/request/select/snat\", \"value\": \"forward/request/select/snat\"}, {\"description\": \"forward/request/select/snatpool\", \"value\": \"forward/request/select/snatpool\"}, {\"description\": \"forward/request/select/vlan\", \"value\": \"forward/request/select/vlan\"}, {\"description\": \"forward/request/select/vlan-id\", \"value\": \"forward/request/select/vlan-id\"}, {\"description\": \"http/request/enable\", \"value\": \"http/request/enable\"}, {\"description\": \"http/request/disable\", \"value\": \"http/request/disable\"}, {\"description\": \"http-cookie/request/insert/name,value\", \"value\": \"http-cookie/request/insert/name,value\"}, {\"description\": \"http-cookie/request/remove/name\", \"value\": \"http-cookie/request/remove/name\"}, {\"description\": \"http-header/request/insert/name,value\", \"value\": \"http-header/request/insert/name,value\"}, {\"description\": \"http-header/request/remove/name\", \"value\": \"http-header/request/remove/name\"}, {\"description\": \"http-header/request/replace/name,value\", \"value\": \"http-header/request/replace/name,value\"}, {\"description\": \"http-header/response/insert/name,value\", \"value\": \"http-header/response/insert/name,value\"}, {\"description\": \"http-header/response/remove/name\", \"value\": \"http-header/response/remove/name\"}, {\"description\": \"http-header/response/replace/name,value\", \"value\": \"http-header/response/replace/name,value\"}, {\"description\": \"http-host/request/replace/value\", \"value\": \"http-host/request/replace/value\"}, {\"description\": \"http-referer/request/insert/value\", \"value\": \"http-referer/request/insert/value\"}, {\"description\": \"http-referer/request/remove\", \"value\": \"http-referer/request/remove\"}, {\"description\": \"http-referer/request/replace/value\", \"value\": \"http-referer/request/replace/value\"}, {\"description\": \"http-reply/request/redirect/location\", \"value\": \"http-reply/request/redirect/location\"}, {\"description\": \"http-reply/response/redirect/location\", \"value\": \"http-reply/response/redirect/location\"}, {\"description\": \"http-set-cookie/response/insert/name,domain,path,value\", \"value\": \"http-set-cookie/response/insert/name,domain,path,value\"}, {\"description\": \"http-set-cookie/response/remove/name\", \"value\": \"http-set-cookie/response/remove/name\"}, {\"description\": \"http-uri/response/replace/path,query-string,value\", \"value\": \"http-uri/response/replace/path,query-string,value\"}, {\"description\": \"l7dos/request/enable/from-profile\", \"value\": \"l7dos/request/enable/from-profile\"}, {\"description\": \"l7dos/request/disable\", \"value\": \"l7dos/request/disable\"}, {\"description\": \"log/request/write/message\", \"value\": \"log/request/write/message\"}, {\"description\": \"log/response/write/message\", \"value\": \"log/response/write/message\"}, {\"description\": \"request-adapt/request/enable/internal-virtual-server\", \"value\": \"request-adapt/request/enable/internal-virtual-server\"}, {\"description\": \"request-adapt/request/disable\", \"value\": \"request-adapt/request/disable\"}, {\"description\": \"request-adapt/response/enable/internal-virtual-server\", \"value\": \"request-adapt/response/enable/internal-virtual-server\"}, {\"description\": \"request-adapt/response/disable\", \"value\": \"request-adapt/response/disable\"}, {\"description\": \"response-adapt/request/enable/internal-virtual-server\", \"value\": \"response-adapt/request/enable/internal-virtual-server\"}, {\"description\": \"response-adapt/request/disable\", \"value\": \"response-adapt/request/disable\"}, {\"description\": \"response-adapt/response/enable/internal-virtual-server\", \"value\": \"response-adapt/response/enable/internal-virtual-server\"}, {\"description\": \"request-adapt/response/disable\", \"value\": \"request-adapt/response/disable\"}, {\"description\": \"server-ssl/request/enable\", \"value\": \"server-ssl/request/enable\"}, {\"description\": \"server-ssl/request/disable\", \"value\": \"server-ssl/request/disable\"}, {\"description\": \"tcl/request/set-variable/name,expression\", \"value\": \"tcl/request/set-variable/name,expression\"}, {\"description\": \"tcl/response/set-variable/name,expression\", \"value\": \"tcl/response/set-variable/name,expression\"}, {\"description\": \"tcl/ssl-client-hello/set-variable/name,expression\", \"value\": \"tcl/ssl-client-hello/set-variable/name,expression\"}, {\"description\": \"tcl/ssl-server-handshake/set-variable/name,expression\", \"value\": \"tcl/ssl-server-handshake/set-variable/name,expression\"}, {\"description\": \"tcl/ssl-server-hello/set-variable/name,expression\", \"value\": \"tcl/ssl-server-hello/set-variable/name,expression\"}, {\"description\": \"tcp-nagle/request/enable\", \"value\": \"tcp-nagle/request/enable\"}, {\"description\": \"tcp-nagle/request/disable\", \"value\": \"tcp-nagle/request/disable\"}], \"isRequired\": false, \"description\": \"Target:\"}, {\"isRequired\": false, \"section\": null, \"displayName\": \"Parameter\", \"name\": \"Parameter\", \"description\": \"Parameter:\"}], \"description\": \"L7 Policy: Rules: Action\"}, {\"displayName\": \"easyL4FirewallBlacklist\", \"name\": \"feature__easyL4FirewallBlacklist\", \"section\": \"feature\", \"isRequired\": false, \"columns\": [{\"isRequired\": false, \"section\": null, \"displayName\": \"CIDRRange\", \"name\": \"CIDRRange\", \"description\": \"CIDR Block:\"}], \"description\": \"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\"}, {\"displayName\": \"easyL4FirewallSourceList\", \"name\": \"feature__easyL4FirewallSourceList\", \"section\": \"feature\", \"isRequired\": false, \"columns\": [{\"displayName\": \"CIDRRange\", \"name\": \"CIDRRange\", \"section\": null, \"isRequired\": false, \"defaultValue\": \"0.0.0.0/0\", \"description\": \"CIDR Block:\"}], \"description\": \"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\"}], \"sections\": [{\"displayName\": \"intro\", \"description\": \"F5 Application Services Integration iApp v2.0.003 (Community Edition)\"}, {\"displayName\": \"iapp\", \"description\": \"iApp Options\"}, {\"displayName\": \"pool\", \"description\": \"Virtual Server Listener & Pool Configuration\"}, {\"displayName\": \"monitor\", \"description\": \"Pool Monitor(s) Configuration\"}, {\"displayName\": \"vs\", \"description\": \"Virtual Server Configuration\"}, {\"displayName\": \"l7policy\", \"description\": \"L7 Traffic Policy\"}, {\"displayName\": \"feature\", \"description\": \"L4-7 Helpers\"}, {\"displayName\": \"extensions\", \"description\": \"Custom Extensions Section\"}], \"vars\": [{\"displayName\": \"strictUpdates\", \"name\": \"iapp__strictUpdates\", \"section\": \"iapp\", \"isRequired\": false, \"defaultValue\": \"enabled\", \"description\": \"iApp: Strict Updates\"}, {\"displayName\": \"appStats\", \"name\": \"iapp__appStats\", \"section\": \"iapp\", \"isRequired\": false, \"defaultValue\": \"enabled\", \"description\": \"iApp: Statistics Handler Creation\"}, {\"displayName\": \"mode\", \"name\": \"iapp__mode\", \"section\": \"iapp\", \"isRequired\": false, \"defaultValue\": \"auto\", \"description\": \"iApp: Mode\"}, {\"displayName\": \"logLevel\", \"name\": \"iapp__logLevel\", \"section\": \"iapp\", \"isRequired\": false, \"defaultValue\": \"7\", \"description\": \"iApp: Log Level\"}, {\"displayName\": \"routeDomain\", \"name\": \"iapp__routeDomain\", \"section\": \"iapp\", \"isRequired\": false, \"defaultValue\": \"auto\", \"description\": \"iApp: Route Domain\"}, {\"displayName\": \"asmDeployMode\", \"name\": \"iapp__asmDeployMode\", \"section\": \"iapp\", \"choices\": [{\"description\": \"preserve-bypass\", \"value\": \"preserve-bypass\"}, {\"description\": \"preserve-block\", \"value\": \"preserve-block\"}, {\"description\": \"redeploy-bypass\", \"value\": \"redeploy-bypass\"}, {\"description\": \"redeploy-block\", \"value\": \"redeploy-block\"}], \"isRequired\": false, \"defaultValue\": \"preserve-bypass\", \"description\": \"iApp: ASM: Deployment Mode\"}, {\"displayName\": \"apmDeployMode\", \"name\": \"iapp__apmDeployMode\", \"section\": \"iapp\", \"choices\": [{\"description\": \"preserve-bypass\", \"value\": \"preserve-bypass\"}, {\"description\": \"preserve-block\", \"value\": \"preserve-block\"}, {\"description\": \"redeploy-bypass\", \"value\": \"redeploy-bypass\"}, {\"description\": \"redeploy-block\", \"value\": \"redeploy-block\"}], \"isRequired\": false, \"defaultValue\": \"preserve-bypass\", \"description\": \"iApp: APM: Deployment Mode\"}, {\"isRequired\": true, \"section\": \"pool\", \"displayName\": \"addr\", \"name\": \"pool__addr\", \"description\": \"Virtual Server: Address\"}, {\"displayName\": \"mask\", \"name\": \"pool__mask\", \"section\": \"pool\", \"isRequired\": true, \"defaultValue\": \"255.255.255.255\", \"description\": \"Virtual Server: Mask\"}, {\"isRequired\": true, \"section\": \"pool\", \"displayName\": \"port\", \"name\": \"pool__port\", \"description\": \"Virtual Server: Port\"}, {\"displayName\": \"DefaultPoolIndex\", \"name\": \"pool__DefaultPoolIndex\", \"section\": \"pool\", \"isRequired\": false, \"defaultValue\": \"0\", \"description\": \"Virtual Server: Default Pool Index\"}, {\"isRequired\": false, \"section\": \"pool\", \"displayName\": \"MemberDefaultPort\", \"name\": \"pool__MemberDefaultPort\", \"description\": \"Pool: Member Default Port\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"Name\", \"name\": \"vs__Name\", \"description\": \"Virtual Server: Name\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"Description\", \"name\": \"vs__Description\", \"description\": \"Virtual Server: Description\"}, {\"displayName\": \"RouteAdv\", \"name\": \"vs__RouteAdv\", \"section\": \"vs\", \"choices\": [{\"description\": \"disabled\", \"value\": \"disabled\"}, {\"description\": \"all_vs\", \"value\": \"all_vs\"}, {\"description\": \"any_vs\", \"value\": \"any_vs\"}, {\"description\": \"always\", \"value\": \"always\"}], \"isRequired\": false, \"defaultValue\": \"disabled\", \"description\": \"Virtual Server: Route Advertisement\"}, {\"displayName\": \"SourceAddress\", \"name\": \"vs__SourceAddress\", \"section\": \"vs\", \"isRequired\": false, \"defaultValue\": \"0.0.0.0/0\", \"description\": \"Virtual Server: Source Address\"}, {\"displayName\": \"IpProtocol\", \"name\": \"vs__IpProtocol\", \"section\": \"vs\", \"isRequired\": false, \"defaultValue\": \"tcp\", \"description\": \"Virtual Server: IP Protocol\"}, {\"displayName\": \"ConnectionLimit\", \"name\": \"vs__ConnectionLimit\", \"section\": \"vs\", \"isRequired\": false, \"defaultValue\": \"0\", \"description\": \"Virtual Server: Virtual Server Connection Limit (0=unlimited)\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileClientProtocol\", \"name\": \"vs__ProfileClientProtocol\", \"description\": \"Virtual Server: Client-side L4 Protocol Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileServerProtocol\", \"name\": \"vs__ProfileServerProtocol\", \"description\": \"Virtual Server: Server-side L4 Protocol Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileHTTP\", \"name\": \"vs__ProfileHTTP\", \"description\": \"Virtual Server: HTTP Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileOneConnect\", \"name\": \"vs__ProfileOneConnect\", \"description\": \"Virtual Server: OneConnect Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileCompression\", \"name\": \"vs__ProfileCompression\", \"description\": \"Virtual Server: Compression Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileAnalytics\", \"name\": \"vs__ProfileAnalytics\", \"description\": \"Virtual Server: Analytics Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileRequestLogging\", \"name\": \"vs__ProfileRequestLogging\", \"description\": \"Virtual Server: Request Logging Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileDefaultPersist\", \"name\": \"vs__ProfileDefaultPersist\", \"description\": \"Virtual Server: Default Persistence Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileFallbackPersist\", \"name\": \"vs__ProfileFallbackPersist\", \"description\": \"Virtual Server: Fallback Persistence Profile\"}, {\"displayName\": \"SNATConfig\", \"name\": \"vs__SNATConfig\", \"section\": \"vs\", \"isRequired\": false, \"defaultValue\": \"automap\", \"description\": \"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileServerSSL\", \"name\": \"vs__ProfileServerSSL\", \"description\": \"Virtual Server: Server SSL Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileClientSSL\", \"name\": \"vs__ProfileClientSSL\", \"description\": \"Virtual Server: Client SSL Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileClientSSLCert\", \"name\": \"vs__ProfileClientSSLCert\", \"description\": \"Virtual Server: Client SSL Certificate\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileClientSSLKey\", \"name\": \"vs__ProfileClientSSLKey\", \"description\": \"Virtual Server: Client SSL Key\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileClientSSLChain\", \"name\": \"vs__ProfileClientSSLChain\", \"description\": \"Virtual Server: Client SSL Certificate Chain\"}, {\"displayName\": \"ProfileClientSSLCipherString\", \"name\": \"vs__ProfileClientSSLCipherString\", \"section\": \"vs\", \"isRequired\": false, \"defaultValue\": \"DEFAULT\", \"description\": \"Virtual Server: Client SSL Cipher String\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileClientSSLAdvOptions\", \"name\": \"vs__ProfileClientSSLAdvOptions\", \"description\": \"Virtual Server: Client SSL Advanced Options\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileSecurityLogProfiles\", \"name\": \"vs__ProfileSecurityLogProfiles\", \"description\": \"Virtual Server: Security Logging Profiles\"}, {\"displayName\": \"ProfileSecurityIPBlacklist\", \"name\": \"vs__ProfileSecurityIPBlacklist\", \"section\": \"vs\", \"choices\": [{\"description\": \"none\", \"value\": \"none\"}, {\"description\": \"enabled-block\", \"value\": \"enabled-block\"}, {\"description\": \"enabled-log\", \"value\": \"enabled-log\"}], \"isRequired\": false, \"defaultValue\": \"none\", \"description\": \"Virtual Server: IP Blacklist Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileSecurityDoS\", \"name\": \"vs__ProfileSecurityDoS\", \"description\": \"Virtual Server: Security: DoS Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileAccess\", \"name\": \"vs__ProfileAccess\", \"description\": \"Virtual Server: Access Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfileConnectivity\", \"name\": \"vs__ProfileConnectivity\", \"description\": \"Virtual Server: Connectivity Profile\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"ProfilePerRequest\", \"name\": \"vs__ProfilePerRequest\", \"description\": \"Virtual Server: Per-Request Profile\"}, {\"displayName\": \"OptionSourcePort\", \"name\": \"vs__OptionSourcePort\", \"section\": \"vs\", \"choices\": [{\"description\": \"preserve\", \"value\": \"preserve\"}, {\"description\": \"preserve-strict\", \"value\": \"preserve-strict\"}, {\"description\": \"change\", \"value\": \"change\"}], \"isRequired\": false, \"defaultValue\": \"preserve\", \"description\": \"Virtual Server: Source Port Behavior\"}, {\"displayName\": \"OptionConnectionMirroring\", \"name\": \"vs__OptionConnectionMirroring\", \"section\": \"vs\", \"isRequired\": false, \"defaultValue\": \"disabled\", \"description\": \"Virtual Server: Connection Mirroring\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"Irules\", \"name\": \"vs__Irules\", \"description\": \"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"AdvOptions\", \"name\": \"vs__AdvOptions\", \"description\": \"Virtual Server: Advanced Options\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"AdvProfiles\", \"name\": \"vs__AdvProfiles\", \"description\": \"Virtual Server: Advanced Profiles\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"AdvPolicies\", \"name\": \"vs__AdvPolicies\", \"description\": \"Virtual Server: Advanced Policies\"}, {\"isRequired\": false, \"section\": \"vs\", \"displayName\": \"VirtualAddrAdvOptions\", \"name\": \"vs__VirtualAddrAdvOptions\", \"description\": \"Virtual Address: Advanced Options\"}, {\"displayName\": \"strategy\", \"name\": \"l7policy__strategy\", \"section\": \"l7policy\", \"choices\": [{\"description\": \"/Common/first-match\", \"value\": \"/Common/first-match\"}, {\"description\": \"/Common/best-match\", \"value\": \"/Common/best-match\"}, {\"description\": \"/Common/all-match\", \"value\": \"/Common/all-match\"}], \"isRequired\": false, \"defaultValue\": \"/Common/first-match\", \"description\": \"L7 Policy: Match Strategy\"}, {\"displayName\": \"defaultASM\", \"name\": \"l7policy__defaultASM\", \"section\": \"l7policy\", \"isRequired\": false, \"defaultValue\": \"bypass\", \"description\": \"L7 Policy: Default ASM Policy\"}, {\"displayName\": \"defaultL7DOS\", \"name\": \"l7policy__defaultL7DOS\", \"section\": \"l7policy\", \"isRequired\": false, \"defaultValue\": \"bypass\", \"description\": \"L7 Policy: Default L7 DoS Policy\"}, {\"displayName\": \"statsTLS\", \"name\": \"feature__statsTLS\", \"section\": \"feature\", \"choices\": [{\"description\": \"auto\", \"value\": \"auto\"}, {\"description\": \"enabled\", \"value\": \"enabled\"}, {\"description\": \"disabled\", \"value\": \"disabled\"}], \"isRequired\": false, \"defaultValue\": \"auto\", \"description\": \"TLS/SSL: Stats Reporting\"}, {\"displayName\": \"statsHTTP\", \"name\": \"feature__statsHTTP\", \"section\": \"feature\", \"choices\": [{\"description\": \"auto\", \"value\": \"auto\"}, {\"description\": \"enabled\", \"value\": \"enabled\"}, {\"description\": \"disabled\", \"value\": \"disabled\"}], \"isRequired\": false, \"defaultValue\": \"auto\", \"description\": \"HTTP: Stats Reporting\"}, {\"displayName\": \"insertXForwardedFor\", \"name\": \"feature__insertXForwardedFor\", \"section\": \"feature\", \"choices\": [{\"description\": \"auto\", \"value\": \"auto\"}, {\"description\": \"enabled\", \"value\": \"enabled\"}, {\"description\": \"disabled\", \"value\": \"disabled\"}], \"isRequired\": false, \"defaultValue\": \"auto\", \"description\": \"HTTP: Insert X-Forwarded-For Header\"}, {\"displayName\": \"redirectToHTTPS\", \"name\": \"feature__redirectToHTTPS\", \"section\": \"feature\", \"choices\": [{\"description\": \"auto\", \"value\": \"auto\"}, {\"description\": \"enabled\", \"value\": \"enabled\"}, {\"description\": \"disabled\", \"value\": \"disabled\"}], \"isRequired\": false, \"defaultValue\": \"auto\", \"description\": \"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\"}, {\"displayName\": \"sslEasyCipher\", \"name\": \"feature__sslEasyCipher\", \"section\": \"feature\", \"choices\": [{\"description\": \"compatible\", \"value\": \"compatible\"}, {\"description\": \"medium\", \"value\": \"medium\"}, {\"description\": \"high\", \"value\": \"high\"}, {\"description\": \"tls_1.2\", \"value\": \"tls_1.2\"}, {\"description\": \"tls_1.1+1.2\", \"value\": \"tls_1.1+1.2\"}, {\"description\": \"disabled\", \"value\": \"disabled\"}], \"isRequired\": false, \"defaultValue\": \"disabled\", \"description\": \"TLS/SSL: Easy Cipher String (overrides VS section setting)\"}, {\"displayName\": \"securityEnableHSTS\", \"name\": \"feature__securityEnableHSTS\", \"section\": \"feature\", \"choices\": [{\"description\": \"disabled\", \"value\": \"disabled\"}, {\"description\": \"enabled\", \"value\": \"enabled\"}, {\"description\": \"enabled-preload\", \"value\": \"enabled-preload\"}, {\"description\": \"enabled-subdomain\", \"value\": \"enabled-subdomain\"}, {\"description\": \"enabled-preload-subdomain\", \"value\": \"enabled-preload-subdomain\"}], \"isRequired\": false, \"defaultValue\": \"disabled\", \"description\": \"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\"}, {\"displayName\": \"easyL4Firewall\", \"name\": \"feature__easyL4Firewall\", \"section\": \"feature\", \"choices\": [{\"description\": \"auto\", \"value\": \"auto\"}, {\"description\": \"base\", \"value\": \"base\"}, {\"description\": \"base+ip_blacklist_block\", \"value\": \"base+ip_blacklist_block\"}, {\"description\": \"base+ip_blacklist_log\", \"value\": \"base+ip_blacklist_log\"}, {\"description\": \"disabled\", \"value\": \"disabled\"}], \"isRequired\": false, \"defaultValue\": \"auto\", \"description\": \"Security: Firewall: Configure L4 Firewall Policy\"}, {\"isRequired\": false, \"section\": \"extensions\", \"displayName\": \"Field1\", \"name\": \"extensions__Field1\", \"description\": \"Extensions: Field 1\"}, {\"isRequired\": false, \"section\": \"extensions\", \"displayName\": \"Field2\", \"name\": \"extensions__Field2\", \"description\": \"Extensions: Field 2\"}, {\"isRequired\": false, \"section\": \"extensions\", \"displayName\": \"Field3\", \"name\": \"extensions__Field3\", \"description\": \"Extensions: Field 3\"}, {\"isRequired\": false, \"defaultValue\": \"enabled\", \"displayName\": \"app_stats\", \"name\": \"app_stats\", \"description\": \"Enable health and performance monitoring.\"}]}}"						},
						"description": ""
					},
					"response": []
				}
			]
		},
		{
			"name": "3_iWorkflow_Service_Template_Examples",
			"description": "Create example Service Catalog Templates on an F5 iWorkflow device\n\nInput Variables:\niwf_mgmt\t\tF5 iWorkflow Management Address\niwf_auth_token\t\tREST API Authentication Token",
			"item": [
				{
					"name": "f5-http-lb Template",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"templateName\",",
									"            \"value\":\"f5-http-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/provider/templates/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"templateName\": \"f5-http-lb\",\n  \"parentReference\": {\n    \"link\":\"/mgmt/cm/cloud/templates/iapp/{{iwf_appsvcs_name}}\"\n  },\n  \"properties\": [\n  {\n        \"id\": \"cloudConnectorReference\",\n        \"displayName\": \"Cloud Connector\",\n        \"isRequired\": true\n    }\n  ],\n  \"sectionOrderOfPresentation\": [\n\t  \"iApp Options\",\n\t  \"Virtual Server Listener & Pool Configuration\",\n\t  \"Pool Monitor(s) Configuration\",\n\t  \"Virtual Server Configuration\",\n\t  \"L7 Traffic Policy\",\n\t  \"L4-7 Helpers\",\n\t  \"Custom Extensions Section\"\n  ],\n  \"overrides\": {\n    \"vars\": [\n      {\n        \"name\": \"extensions__Field1\",\n        \"description\": \"Extensions: Field 1\",\n        \"displayName\": \"Field1\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field2\",\n        \"description\": \"Extensions: Field 2\",\n        \"displayName\": \"Field2\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field3\",\n        \"description\": \"Extensions: Field 3\",\n        \"displayName\": \"Field3\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"feature__easyL4Firewall\",\n        \"description\": \"Security: Firewall: Configure L4 Firewall Policy\",\n        \"displayName\": \"easyL4Firewall\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"base\",\n            \"description\": \"base\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_block\",\n            \"description\": \"base+ip_blacklist_block\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_log\",\n            \"description\": \"base+ip_blacklist_log\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__insertXForwardedFor\",\n        \"description\": \"HTTP: Insert X-Forwarded-For Header\",\n        \"displayName\": \"insertXForwardedFor\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__redirectToHTTPS\",\n        \"description\": \"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\",\n        \"displayName\": \"redirectToHTTPS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__securityEnableHSTS\",\n        \"description\": \"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\",\n        \"displayName\": \"securityEnableHSTS\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\"\n      },\n      {\n        \"name\": \"feature__sslEasyCipher\",\n        \"description\": \"TLS\\/SSL: Easy Cipher String (overrides VS section setting)\",\n        \"displayName\": \"sslEasyCipher\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"compatible\",\n            \"description\": \"compatible\"\n          },\n          {\n            \"value\": \"medium\",\n            \"description\": \"medium\"\n          },\n          {\n            \"value\": \"high\",\n            \"description\": \"high\"\n          },\n          {\n            \"value\": \"tls_1.2\",\n            \"description\": \"tls_1.2\"\n          },\n          {\n            \"value\": \"tls_1.1+1.2\",\n            \"description\": \"tls_1.1+1.2\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsHTTP\",\n        \"description\": \"HTTP: Stats Reporting\",\n        \"displayName\": \"statsHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsTLS\",\n        \"description\": \"TLS\\/SSL: Stats Reporting\",\n        \"displayName\": \"statsTLS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__apmDeployMode\",\n        \"description\": \"iApp: APM: Deployment Mode\",\n        \"displayName\": \"apmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__appStats\",\n        \"description\": \"iApp: Statistics Handler Creation\",\n        \"displayName\": \"appStats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__asmDeployMode\",\n        \"description\": \"iApp: ASM: Deployment Mode\",\n        \"displayName\": \"asmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__logLevel\",\n        \"description\": \"iApp: Log Level\",\n        \"displayName\": \"logLevel\",\n        \"isRequired\": false,\n        \"provider\": \"7\"\n      },\n      {\n        \"name\": \"iapp__mode\",\n        \"description\": \"iApp: Mode\",\n        \"displayName\": \"mode\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__routeDomain\",\n        \"description\": \"iApp: Route Domain\",\n        \"displayName\": \"routeDomain\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__strictUpdates\",\n        \"description\": \"iApp: Strict Updates\",\n        \"displayName\": \"strictUpdates\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"l7policy__defaultASM\",\n        \"description\": \"L7 Policy: Default ASM Policy\",\n        \"displayName\": \"defaultASM\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__defaultL7DOS\",\n        \"description\": \"L7 Policy: Default L7 DoS Policy\",\n        \"displayName\": \"defaultL7DOS\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__strategy\",\n        \"description\": \"L7 Policy: Match Strategy\",\n        \"displayName\": \"strategy\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/first-match\"\n      },\n      {\n        \"name\": \"pool__DefaultPoolIndex\",\n        \"description\": \"Virtual Server: Default Pool Index\",\n        \"displayName\": \"DefaultPoolIndex\",\n        \"isRequired\": false,\n        \"provider\": \"0\",\n        \"validator\": \"NonNegativeNumber\"\n      },\n      {\n        \"name\": \"pool__MemberDefaultPort\",\n        \"description\": \"Pool: Member Default Port\",\n        \"displayName\": \"MemberDefaultPort\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"pool__addr\",\n        \"description\": \"Virtual Server: Address\",\n        \"displayName\": \"addr\",\n        \"isRequired\": true,\n        \"defaultValue\": \"\",\n        \"providerType\": \"NODE\",\n        \"serverTier\": \"Default\",\n        \"validator\": \"IpAddress\"\n      },\n      {\n        \"name\": \"pool__mask\",\n        \"description\": \"Virtual Server: Mask\",\n        \"displayName\": \"mask\",\n        \"isRequired\": true,\n        \"provider\": \"255.255.255.255\",\n        \"validator\": \"IpAddress\"\n      },\n      {\n        \"name\": \"pool__port\",\n        \"description\": \"Virtual Server: Port\",\n        \"displayName\": \"port\",\n        \"isRequired\": true,\n        \"defaultValue\": \"80\",\n        \"providerType\": \"PORT\",\n        \"serverTier\": \"Default\",\n        \"validator\": \"PortNumber\"\n      },\n      {\n        \"name\": \"vs__AdvOptions\",\n        \"description\": \"Virtual Server: Advanced Options\",\n        \"displayName\": \"AdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvPolicies\",\n        \"description\": \"Virtual Server: Advanced Policies\",\n        \"displayName\": \"AdvPolicies\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvProfiles\",\n        \"description\": \"Virtual Server: Advanced Profiles\",\n        \"displayName\": \"AdvProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ConnectionLimit\",\n        \"description\": \"Virtual Server: Virtual Server Connection Limit (0=unlimited)\",\n        \"displayName\": \"ConnectionLimit\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"vs__Description\",\n        \"description\": \"Virtual Server: Description\",\n        \"displayName\": \"Description\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__IpProtocol\",\n        \"description\": \"Virtual Server: IP Protocol\",\n        \"displayName\": \"IpProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"tcp\"\n      },\n      {\n        \"name\": \"vs__Irules\",\n        \"description\": \"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\",\n        \"displayName\": \"Irules\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__Name\",\n        \"description\": \"Virtual Server: Name\",\n        \"displayName\": \"Name\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__OptionConnectionMirroring\",\n        \"description\": \"Virtual Server: Connection Mirroring\",\n        \"displayName\": \"OptionConnectionMirroring\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__OptionSourcePort\",\n        \"description\": \"Virtual Server: Source Port Behavior\",\n        \"displayName\": \"OptionSourcePort\",\n        \"isRequired\": false,\n        \"provider\": \"preserve\",\n        \"choices\": [\n          {\n            \"value\": \"preserve\",\n            \"description\": \"preserve\"\n          },\n          {\n            \"value\": \"preserve-strict\",\n            \"description\": \"preserve-strict\"\n          },\n          {\n            \"value\": \"change\",\n            \"description\": \"change\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__ProfileAccess\",\n        \"description\": \"Virtual Server: Access Profile\",\n        \"displayName\": \"ProfileAccess\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileAnalytics\",\n        \"description\": \"Virtual Server: Analytics Profile\",\n        \"displayName\": \"ProfileAnalytics\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientProtocol\",\n        \"description\": \"Virtual Server: Client-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileClientProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/tcp-wan-optimized\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSL\",\n        \"description\": \"Virtual Server: Client SSL Profile\",\n        \"displayName\": \"ProfileClientSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLAdvOptions\",\n        \"description\": \"Virtual Server: Client SSL Advanced Options\",\n        \"displayName\": \"ProfileClientSSLAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCert\",\n        \"description\": \"Virtual Server: Client SSL Certificate\",\n        \"displayName\": \"ProfileClientSSLCert\",\n        \"isRequired\": false,\n        \"provider\":\"\",\n        \"serverTier\": \"Default\",\n        \"providerType\": \"SSL_CERT\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLChain\",\n        \"description\": \"Virtual Server: Client SSL Certificate Chain\",\n        \"displayName\": \"ProfileClientSSLChain\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCipherString\",\n        \"description\": \"Virtual Server: Client SSL Cipher String\",\n        \"displayName\": \"ProfileClientSSLCipherString\",\n        \"isRequired\": false,\n        \"provider\": \"DEFAULT\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLKey\",\n        \"description\": \"Virtual Server: Client SSL Key\",\n        \"displayName\": \"ProfileClientSSLKey\",\n        \"isRequired\": false,\n        \"provider\":\"\",        \n        \"serverTier\": \"Default\",\n        \"providerType\": \"SSL_KEY\"\n      },\n      {\n        \"name\": \"vs__ProfileCompression\",\n        \"description\": \"Virtual Server: Compression Profile\",\n        \"displayName\": \"ProfileCompression\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileConnectivity\",\n        \"description\": \"Virtual Server: Connectivity Profile\",\n        \"displayName\": \"ProfileConnectivity\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileDefaultPersist\",\n        \"description\": \"Virtual Server: Default Persistence Profile\",\n        \"displayName\": \"ProfileDefaultPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileFallbackPersist\",\n        \"description\": \"Virtual Server: Fallback Persistence Profile\",\n        \"displayName\": \"ProfileFallbackPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileHTTP\",\n        \"description\": \"Virtual Server: HTTP Profile\",\n        \"displayName\": \"ProfileHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/http\"\n      },\n      {\n        \"name\": \"vs__ProfileOneConnect\",\n        \"description\": \"Virtual Server: OneConnect Profile\",\n        \"displayName\": \"ProfileOneConnect\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfilePerRequest\",\n        \"description\": \"Virtual Server: Per-Request Profile\",\n        \"displayName\": \"ProfilePerRequest\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileRequestLogging\",\n        \"description\": \"Virtual Server: Request Logging Profile\",\n        \"displayName\": \"ProfileRequestLogging\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityDoS\",\n        \"description\": \"Virtual Server: Security: DoS Profile\",\n        \"displayName\": \"ProfileSecurityDoS\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityIPBlacklist\",\n        \"description\": \"Virtual Server: IP Blacklist Profile\",\n        \"displayName\": \"ProfileSecurityIPBlacklist\",\n        \"isRequired\": false,\n        \"provider\": \"none\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityLogProfiles\",\n        \"description\": \"Virtual Server: Security Logging Profiles\",\n        \"displayName\": \"ProfileSecurityLogProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileServerProtocol\",\n        \"description\": \"Virtual Server: Server-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileServerProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/tcp-wan-optimized\"\n      },\n      {\n        \"name\": \"vs__ProfileServerSSL\",\n        \"description\": \"Virtual Server: Server SSL Profile\",\n        \"displayName\": \"ProfileServerSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__RouteAdv\",\n        \"description\": \"Virtual Server: Route Advertisement\",\n        \"displayName\": \"RouteAdv\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          },\n          {\n            \"value\": \"all_vs\",\n            \"description\": \"all_vs\"\n          },\n          {\n            \"value\": \"any_vs\",\n            \"description\": \"any_vs\"\n          },\n          {\n            \"value\": \"always\",\n            \"description\": \"always\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__SNATConfig\",\n        \"description\": \"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\",\n        \"displayName\": \"SNATConfig\",\n        \"isRequired\": false,\n        \"provider\": \"automap\"\n      },\n      {\n        \"name\": \"vs__SourceAddress\",\n        \"description\": \"Virtual Server: Source Address\",\n        \"displayName\": \"SourceAddress\",\n        \"isRequired\": false,\n        \"provider\": \"0.0.0.0\\/0\"\n      },\n      {\n        \"name\": \"vs__VirtualAddrAdvOptions\",\n        \"description\": \"Virtual Address: Advanced Options\",\n        \"displayName\": \"VirtualAddrAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"app_stats\",\n        \"description\": \"Enable health and performance monitoring.\",\n        \"displayName\": \"app_stats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      }\n    ],\n    \"tables\": [\n      {\n        \"name\": \"feature__easyL4FirewallBlacklist\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"feature__easyL4FirewallSourceList\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"0.0.0.0\\/0\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"l7policy__rulesAction\",\n        \"columns\": [\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Parameter\",\n            \"description\": \"Parameter:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Target\",\n            \"description\": \"Target:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Action\"\n      },\n      {\n        \"name\": \"l7policy__rulesMatch\",\n        \"columns\": [\n          {\n            \"name\": \"CaseSensitive\",\n            \"description\": \"Case Sensitive:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Condition\",\n            \"description\": \"Condition:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Missing\",\n            \"description\": \"Missing:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Negate\",\n            \"description\": \"Negate:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Operand\",\n            \"description\": \"Operand:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Value\",\n            \"description\": \"Value:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Matching\"\n      },\n      {\n        \"name\": \"monitor__Monitors\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"provider\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Options\",\n            \"description\": \"Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Type\",\n            \"description\": \"Type:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Monitor: Monitor Table\"\n      },\n      {\n        \"name\": \"pool__Members\",\n        \"serverTier\": \"Default\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"ConnectionLimit\",\n            \"description\": \"Connection Limit:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"IPAddress\",\n            \"description\": \"IP\\/Node Name:\",\n            \"isRequired\": false,\n            \"providerType\": \"NODE\",\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Pool Idx:\",\n            \"isRequired\": false,\n            \"provider\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Port\",\n            \"description\": \"Port:\",\n            \"isRequired\": false,\n            \"providerType\": \"PORT\",\n            \"provider\": \"80\"\n          },\n          {\n            \"name\": \"PriorityGroup\",\n            \"description\": \"Priority Group:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Ratio\",\n            \"description\": \"Ratio:\",\n            \"isRequired\": false,\n            \"provider\": \"1\"\n          },\n          {\n            \"name\": \"State\",\n            \"description\": \"State:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"enabled\"\n          }\n        ],\n        \"description\": \"Pool: Members\"\n      },\n      {\n        \"name\": \"pool__Pools\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Description\",\n            \"description\": \"Description:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"provider\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"LbMethod\",\n            \"description\": \"LB Method:\",\n            \"isRequired\": false,\n            \"provider\": \"round-robin\"\n          },\n          {\n            \"name\": \"Monitor\",\n            \"description\": \"Monitor(s):\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Pool: Pool Table\"\n      },\n      {\n        \"name\": \"vs__BundledItems\",\n        \"columns\": [\n          {\n            \"name\": \"Resource\",\n            \"description\": \"Resource:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Bundled Items\"\n      },\n      {\n        \"name\": \"vs__Listeners\",\n        \"columns\": [\n          {\n            \"name\": \"Destination\",\n            \"description\": \"Destination\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Listener\",\n            \"description\": \"Listener:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Additional Listeners\"\n      }\n    ]\n  }\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "f5-https-offload Template",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"templateName\",",
									"            \"value\":\"f5-https-offload\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}"
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/provider/templates/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"templateName\": \"f5-https-offload\",\n  \"parentReference\": {\n    \"link\":\"/mgmt/cm/cloud/templates/iapp/{{iwf_appsvcs_name}}\"\n  },\n  \"properties\": [\n  {\n        \"id\": \"cloudConnectorReference\",\n        \"displayName\": \"Cloud Connector\",\n        \"isRequired\": true\n    }\n  ],\n  \"sectionOrderOfPresentation\": [\n    \"iApp Options\",\n    \"Virtual Server Listener & Pool Configuration\",\n    \"Pool Monitor(s) Configuration\",\n    \"Virtual Server Configuration\",\n    \"L7 Traffic Policy\",\n    \"L4-7 Helpers\",\n    \"Custom Extensions Section\"\n  ],\n \"overrides\": {\n    \"vars\": [\n      {\n        \"name\": \"extensions__Field1\",\n        \"description\": \"Extensions: Field 1\",\n        \"displayName\": \"Field1\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field2\",\n        \"description\": \"Extensions: Field 2\",\n        \"displayName\": \"Field2\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field3\",\n        \"description\": \"Extensions: Field 3\",\n        \"displayName\": \"Field3\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"feature__easyL4Firewall\",\n        \"description\": \"Security: Firewall: Configure L4 Firewall Policy\",\n        \"displayName\": \"easyL4Firewall\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"base\",\n            \"description\": \"base\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_block\",\n            \"description\": \"base+ip_blacklist_block\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_log\",\n            \"description\": \"base+ip_blacklist_log\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__insertXForwardedFor\",\n        \"description\": \"HTTP: Insert X-Forwarded-For Header\",\n        \"displayName\": \"insertXForwardedFor\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__redirectToHTTPS\",\n        \"description\": \"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\",\n        \"displayName\": \"redirectToHTTPS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__securityEnableHSTS\",\n        \"description\": \"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\",\n        \"displayName\": \"securityEnableHSTS\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\"\n      },\n      {\n        \"name\": \"feature__sslEasyCipher\",\n        \"description\": \"TLS\\/SSL: Easy Cipher String (overrides VS section setting)\",\n        \"displayName\": \"sslEasyCipher\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"compatible\",\n            \"description\": \"compatible\"\n          },\n          {\n            \"value\": \"medium\",\n            \"description\": \"medium\"\n          },\n          {\n            \"value\": \"high\",\n            \"description\": \"high\"\n          },\n          {\n            \"value\": \"tls_1.2\",\n            \"description\": \"tls_1.2\"\n          },\n          {\n            \"value\": \"tls_1.1+1.2\",\n            \"description\": \"tls_1.1+1.2\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsHTTP\",\n        \"description\": \"HTTP: Stats Reporting\",\n        \"displayName\": \"statsHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsTLS\",\n        \"description\": \"TLS\\/SSL: Stats Reporting\",\n        \"displayName\": \"statsTLS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__apmDeployMode\",\n        \"description\": \"iApp: APM: Deployment Mode\",\n        \"displayName\": \"apmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__appStats\",\n        \"description\": \"iApp: Statistics Handler Creation\",\n        \"displayName\": \"appStats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__asmDeployMode\",\n        \"description\": \"iApp: ASM: Deployment Mode\",\n        \"displayName\": \"asmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__logLevel\",\n        \"description\": \"iApp: Log Level\",\n        \"displayName\": \"logLevel\",\n        \"isRequired\": false,\n        \"provider\": \"7\"\n      },\n      {\n        \"name\": \"iapp__mode\",\n        \"description\": \"iApp: Mode\",\n        \"displayName\": \"mode\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__routeDomain\",\n        \"description\": \"iApp: Route Domain\",\n        \"displayName\": \"routeDomain\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__strictUpdates\",\n        \"description\": \"iApp: Strict Updates\",\n        \"displayName\": \"strictUpdates\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"l7policy__defaultASM\",\n        \"description\": \"L7 Policy: Default ASM Policy\",\n        \"displayName\": \"defaultASM\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__defaultL7DOS\",\n        \"description\": \"L7 Policy: Default L7 DoS Policy\",\n        \"displayName\": \"defaultL7DOS\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__strategy\",\n        \"description\": \"L7 Policy: Match Strategy\",\n        \"displayName\": \"strategy\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/first-match\"\n      },\n      {\n        \"name\": \"pool__DefaultPoolIndex\",\n        \"description\": \"Virtual Server: Default Pool Index\",\n        \"displayName\": \"DefaultPoolIndex\",\n        \"isRequired\": false,\n        \"provider\": \"0\",\n        \"validator\": \"NonNegativeNumber\"\n      },\n      {\n        \"name\": \"pool__MemberDefaultPort\",\n        \"description\": \"Pool: Member Default Port\",\n        \"displayName\": \"MemberDefaultPort\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"pool__addr\",\n        \"description\": \"Virtual Server: Address\",\n        \"displayName\": \"addr\",\n        \"isRequired\": true,\n        \"defaultValue\": \"\",\n        \"providerType\": \"NODE\",\n        \"serverTier\": \"Default\",\n        \"validator\": \"IpAddress\"\n      },\n      {\n        \"name\": \"pool__mask\",\n        \"description\": \"Virtual Server: Mask\",\n        \"displayName\": \"mask\",\n        \"isRequired\": true,\n        \"provider\": \"255.255.255.255\",\n        \"validator\": \"IpAddress\"\n      },\n      {\n        \"name\": \"pool__port\",\n        \"description\": \"Virtual Server: Port\",\n        \"displayName\": \"port\",\n        \"isRequired\": true,\n        \"defaultValue\": \"443\",\n        \"providerType\": \"PORT\",\n        \"serverTier\": \"Default\",\n        \"validator\": \"PortNumber\"\n      },\n      {\n        \"name\": \"vs__AdvOptions\",\n        \"description\": \"Virtual Server: Advanced Options\",\n        \"displayName\": \"AdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvPolicies\",\n        \"description\": \"Virtual Server: Advanced Policies\",\n        \"displayName\": \"AdvPolicies\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvProfiles\",\n        \"description\": \"Virtual Server: Advanced Profiles\",\n        \"displayName\": \"AdvProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ConnectionLimit\",\n        \"description\": \"Virtual Server: Virtual Server Connection Limit (0=unlimited)\",\n        \"displayName\": \"ConnectionLimit\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"vs__Description\",\n        \"description\": \"Virtual Server: Description\",\n        \"displayName\": \"Description\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__IpProtocol\",\n        \"description\": \"Virtual Server: IP Protocol\",\n        \"displayName\": \"IpProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"tcp\"\n      },\n      {\n        \"name\": \"vs__Irules\",\n        \"description\": \"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\",\n        \"displayName\": \"Irules\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__Name\",\n        \"description\": \"Virtual Server: Name\",\n        \"displayName\": \"Name\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__OptionConnectionMirroring\",\n        \"description\": \"Virtual Server: Connection Mirroring\",\n        \"displayName\": \"OptionConnectionMirroring\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__OptionSourcePort\",\n        \"description\": \"Virtual Server: Source Port Behavior\",\n        \"displayName\": \"OptionSourcePort\",\n        \"isRequired\": false,\n        \"provider\": \"preserve\",\n        \"choices\": [\n          {\n            \"value\": \"preserve\",\n            \"description\": \"preserve\"\n          },\n          {\n            \"value\": \"preserve-strict\",\n            \"description\": \"preserve-strict\"\n          },\n          {\n            \"value\": \"change\",\n            \"description\": \"change\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__ProfileAccess\",\n        \"description\": \"Virtual Server: Access Profile\",\n        \"displayName\": \"ProfileAccess\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileAnalytics\",\n        \"description\": \"Virtual Server: Analytics Profile\",\n        \"displayName\": \"ProfileAnalytics\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientProtocol\",\n        \"description\": \"Virtual Server: Client-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileClientProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/tcp-wan-optimized\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSL\",\n        \"description\": \"Virtual Server: Client SSL Profile\",\n        \"displayName\": \"ProfileClientSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLAdvOptions\",\n        \"description\": \"Virtual Server: Client SSL Advanced Options\",\n        \"displayName\": \"ProfileClientSSLAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCert\",\n        \"description\": \"Virtual Server: Client SSL Certificate\",\n        \"displayName\": \"ProfileClientSSLCert\",\n        \"isRequired\": false,\n        \"defaultValue\": \"\\/Common\\/default.crt\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLChain\",\n        \"description\": \"Virtual Server: Client SSL Certificate Chain\",\n        \"displayName\": \"ProfileClientSSLChain\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCipherString\",\n        \"description\": \"Virtual Server: Client SSL Cipher String\",\n        \"displayName\": \"ProfileClientSSLCipherString\",\n        \"isRequired\": false,\n        \"provider\": \"DEFAULT\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLKey\",\n        \"description\": \"Virtual Server: Client SSL Key\",\n        \"displayName\": \"ProfileClientSSLKey\",\n        \"isRequired\": false,\n        \"defaultValue\": \"\\/Common\\/default.key\"\n      },\n      {\n        \"name\": \"vs__ProfileCompression\",\n        \"description\": \"Virtual Server: Compression Profile\",\n        \"displayName\": \"ProfileCompression\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileConnectivity\",\n        \"description\": \"Virtual Server: Connectivity Profile\",\n        \"displayName\": \"ProfileConnectivity\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileDefaultPersist\",\n        \"description\": \"Virtual Server: Default Persistence Profile\",\n        \"displayName\": \"ProfileDefaultPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileFallbackPersist\",\n        \"description\": \"Virtual Server: Fallback Persistence Profile\",\n        \"displayName\": \"ProfileFallbackPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileHTTP\",\n        \"description\": \"Virtual Server: HTTP Profile\",\n        \"displayName\": \"ProfileHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/http\"\n      },\n      {\n        \"name\": \"vs__ProfileOneConnect\",\n        \"description\": \"Virtual Server: OneConnect Profile\",\n        \"displayName\": \"ProfileOneConnect\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfilePerRequest\",\n        \"description\": \"Virtual Server: Per-Request Profile\",\n        \"displayName\": \"ProfilePerRequest\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileRequestLogging\",\n        \"description\": \"Virtual Server: Request Logging Profile\",\n        \"displayName\": \"ProfileRequestLogging\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityDoS\",\n        \"description\": \"Virtual Server: Security: DoS Profile\",\n        \"displayName\": \"ProfileSecurityDoS\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityIPBlacklist\",\n        \"description\": \"Virtual Server: IP Blacklist Profile\",\n        \"displayName\": \"ProfileSecurityIPBlacklist\",\n        \"isRequired\": false,\n        \"provider\": \"none\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityLogProfiles\",\n        \"description\": \"Virtual Server: Security Logging Profiles\",\n        \"displayName\": \"ProfileSecurityLogProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileServerProtocol\",\n        \"description\": \"Virtual Server: Server-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileServerProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/tcp-wan-optimized\"\n      },\n      {\n        \"name\": \"vs__ProfileServerSSL\",\n        \"description\": \"Virtual Server: Server SSL Profile\",\n        \"displayName\": \"ProfileServerSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__RouteAdv\",\n        \"description\": \"Virtual Server: Route Advertisement\",\n        \"displayName\": \"RouteAdv\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          },\n          {\n            \"value\": \"all_vs\",\n            \"description\": \"all_vs\"\n          },\n          {\n            \"value\": \"any_vs\",\n            \"description\": \"any_vs\"\n          },\n          {\n            \"value\": \"always\",\n            \"description\": \"always\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__SNATConfig\",\n        \"description\": \"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\",\n        \"displayName\": \"SNATConfig\",\n        \"isRequired\": false,\n        \"provider\": \"automap\"\n      },\n      {\n        \"name\": \"vs__SourceAddress\",\n        \"description\": \"Virtual Server: Source Address\",\n        \"displayName\": \"SourceAddress\",\n        \"isRequired\": false,\n        \"provider\": \"0.0.0.0\\/0\"\n      },\n      {\n        \"name\": \"vs__VirtualAddrAdvOptions\",\n        \"description\": \"Virtual Address: Advanced Options\",\n        \"displayName\": \"VirtualAddrAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"app_stats\",\n        \"description\": \"Enable health and performance monitoring.\",\n        \"displayName\": \"app_stats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      }\n    ],\n    \"tables\": [\n      {\n        \"name\": \"feature__easyL4FirewallBlacklist\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"feature__easyL4FirewallSourceList\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"0.0.0.0\\/0\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"l7policy__rulesAction\",\n        \"columns\": [\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Parameter\",\n            \"description\": \"Parameter:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Target\",\n            \"description\": \"Target:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Action\"\n      },\n      {\n        \"name\": \"l7policy__rulesMatch\",\n        \"columns\": [\n          {\n            \"name\": \"CaseSensitive\",\n            \"description\": \"Case Sensitive:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Condition\",\n            \"description\": \"Condition:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Missing\",\n            \"description\": \"Missing:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Negate\",\n            \"description\": \"Negate:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Operand\",\n            \"description\": \"Operand:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Value\",\n            \"description\": \"Value:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Matching\"\n      },\n      {\n        \"name\": \"monitor__Monitors\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"provider\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Options\",\n            \"description\": \"Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Type\",\n            \"description\": \"Type:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Monitor: Monitor Table\"\n      },\n      {\n        \"name\": \"pool__Members\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"ConnectionLimit\",\n            \"description\": \"Connection Limit:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"IPAddress\",\n            \"description\": \"IP\\/Node Name:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\",\n            \"providerType\": \"NODE\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Pool Idx:\",\n            \"isRequired\": false,\n            \"provider\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Port\",\n            \"description\": \"Port:\",\n            \"isRequired\": false,\n            \"provider\": \"80\",\n            \"providerType\": \"PORT\"\n          },\n          {\n            \"name\": \"PriorityGroup\",\n            \"description\": \"Priority Group:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Ratio\",\n            \"description\": \"Ratio:\",\n            \"isRequired\": false,\n            \"provider\": \"1\"\n          },\n          {\n            \"name\": \"State\",\n            \"description\": \"State:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"enabled\"\n          }\n        ],\n        \"description\": \"Pool: Members\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"pool__Pools\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Description\",\n            \"description\": \"Description:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"provider\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"LbMethod\",\n            \"description\": \"LB Method:\",\n            \"isRequired\": false,\n            \"provider\": \"round-robin\"\n          },\n          {\n            \"name\": \"Monitor\",\n            \"description\": \"Monitor(s):\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Pool: Pool Table\"\n      },\n      {\n        \"name\": \"vs__BundledItems\",\n        \"columns\": [\n          {\n            \"name\": \"Resource\",\n            \"description\": \"Resource:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Bundled Items\"\n      },\n      {\n        \"name\": \"vs__Listeners\",\n        \"columns\": [\n          {\n            \"name\": \"Destination\",\n            \"description\": \"Destination\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Listener\",\n            \"description\": \"Listener:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Additional Listeners\"\n      }\n    ]\n  }\n}\n"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "f5-fastl4-tcp-lb Template",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"templateName\",",
									"            \"value\":\"f5-fastl4-tcp-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/provider/templates/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"templateName\": \"f5-fastl4-tcp-lb\",\n  \"parentReference\": {\n    \"link\":\"/mgmt/cm/cloud/templates/iapp/{{iwf_appsvcs_name}}\"\n  },\n  \"properties\": [\n  {\n        \"id\": \"cloudConnectorReference\",\n        \"displayName\": \"Cloud Connector\",\n        \"isRequired\": true\n    }\n  ],\n  \"sectionOrderOfPresentation\": [\n\t  \"iApp Options\",\n\t  \"Virtual Server Listener & Pool Configuration\",\n\t  \"Pool Monitor(s) Configuration\",\n\t  \"Virtual Server Configuration\",\n\t  \"L7 Traffic Policy\",\n\t  \"L4-7 Helpers\",\n\t  \"Custom Extensions Section\"\n  ],\n  \"overrides\": {\n    \"vars\": [\n      {\n        \"name\": \"iapp__strictUpdates\",\n        \"description\": \"iApp: Strict Updates\",\n        \"displayName\": \"strictUpdates\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      },\n      {\n        \"name\": \"iapp__appStats\",\n        \"description\": \"iApp: Statistics Handler Creation\",\n        \"displayName\": \"appStats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      },\n      {\n        \"name\": \"iapp__mode\",\n        \"description\": \"iApp: Mode\",\n        \"displayName\": \"mode\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__logLevel\",\n        \"description\": \"iApp: Log Level\",\n        \"displayName\": \"logLevel\",\n        \"isRequired\": false,\n        \"provider\": \"7\"\n      },\n      {\n        \"name\": \"iapp__routeDomain\",\n        \"description\": \"iApp: Route Domain\",\n        \"displayName\": \"routeDomain\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__asmDeployMode\",\n        \"description\": \"iApp: ASM: Deployment Mode\",\n        \"displayName\": \"asmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__apmDeployMode\",\n        \"description\": \"iApp: APM: Deployment Mode\",\n        \"displayName\": \"apmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"pool__addr\",\n        \"description\": \"Virtual Server: Address\",\n        \"displayName\": \"addr\",\n        \"isRequired\": true,\n        \"defaultValue\": \"\",\n        \"providerType\": \"NODE\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"pool__mask\",\n        \"description\": \"Virtual Server: Mask\",\n        \"displayName\": \"mask\",\n        \"isRequired\": true,\n        \"provider\": \"255.255.255.255\"\n      },\n      {\n        \"name\": \"pool__port\",\n        \"description\": \"Virtual Server: Port\",\n        \"displayName\": \"port\",\n        \"isRequired\": true,\n        \"defaultValue\": \"\",\n        \"providerType\": \"PORT\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"pool__DefaultPoolIndex\",\n        \"description\": \"Virtual Server: Default Pool Index\",\n        \"displayName\": \"DefaultPoolIndex\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"pool__MemberDefaultPort\",\n        \"description\": \"Pool: Member Default Port\",\n        \"displayName\": \"MemberDefaultPort\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__Name\",\n        \"description\": \"Virtual Server: Name\",\n        \"displayName\": \"Name\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__Description\",\n        \"description\": \"Virtual Server: Description\",\n        \"displayName\": \"Description\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__RouteAdv\",\n        \"description\": \"Virtual Server: Route Advertisement\",\n        \"displayName\": \"RouteAdv\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          },\n          {\n            \"value\": \"all_vs\",\n            \"description\": \"all_vs\"\n          },\n          {\n            \"value\": \"any_vs\",\n            \"description\": \"any_vs\"\n          },\n          {\n            \"value\": \"always\",\n            \"description\": \"always\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__SourceAddress\",\n        \"description\": \"Virtual Server: Source Address\",\n        \"displayName\": \"SourceAddress\",\n        \"isRequired\": false,\n        \"provider\": \"0.0.0.0\\/0\"\n      },\n      {\n        \"name\": \"vs__IpProtocol\",\n        \"description\": \"Virtual Server: IP Protocol\",\n        \"displayName\": \"IpProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"tcp\"\n      },\n      {\n        \"name\": \"vs__ConnectionLimit\",\n        \"description\": \"Virtual Server: Virtual Server Connection Limit (0=unlimited)\",\n        \"displayName\": \"ConnectionLimit\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"vs__ProfileClientProtocol\",\n        \"description\": \"Virtual Server: Client-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileClientProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/fastL4\"\n      },\n      {\n        \"name\": \"vs__ProfileServerProtocol\",\n        \"description\": \"Virtual Server: Server-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileServerProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/fastL4\"\n      },\n      {\n        \"name\": \"vs__ProfileHTTP\",\n        \"description\": \"Virtual Server: HTTP Profile\",\n        \"displayName\": \"ProfileHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileOneConnect\",\n        \"description\": \"Virtual Server: OneConnect Profile\",\n        \"displayName\": \"ProfileOneConnect\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileCompression\",\n        \"description\": \"Virtual Server: Compression Profile\",\n        \"displayName\": \"ProfileCompression\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileAnalytics\",\n        \"description\": \"Virtual Server: Analytics Profile\",\n        \"displayName\": \"ProfileAnalytics\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileRequestLogging\",\n        \"description\": \"Virtual Server: Request Logging Profile\",\n        \"displayName\": \"ProfileRequestLogging\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileDefaultPersist\",\n        \"description\": \"Virtual Server: Default Persistence Profile\",\n        \"displayName\": \"ProfileDefaultPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/source_addr\"\n      },\n      {\n        \"name\": \"vs__ProfileFallbackPersist\",\n        \"description\": \"Virtual Server: Fallback Persistence Profile\",\n        \"displayName\": \"ProfileFallbackPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__SNATConfig\",\n        \"description\": \"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\",\n        \"displayName\": \"SNATConfig\",\n        \"isRequired\": false,\n        \"provider\": \"automap\"\n      },\n      {\n        \"name\": \"vs__ProfileServerSSL\",\n        \"description\": \"Virtual Server: Server SSL Profile\",\n        \"displayName\": \"ProfileServerSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSL\",\n        \"description\": \"Virtual Server: Client SSL Profile\",\n        \"displayName\": \"ProfileClientSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCert\",\n        \"description\": \"Virtual Server: Client SSL Certificate\",\n        \"displayName\": \"ProfileClientSSLCert\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLKey\",\n        \"description\": \"Virtual Server: Client SSL Key\",\n        \"displayName\": \"ProfileClientSSLKey\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLChain\",\n        \"description\": \"Virtual Server: Client SSL Certificate Chain\",\n        \"displayName\": \"ProfileClientSSLChain\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCipherString\",\n        \"description\": \"Virtual Server: Client SSL Cipher String\",\n        \"displayName\": \"ProfileClientSSLCipherString\",\n        \"isRequired\": false,\n        \"provider\": \"DEFAULT\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLAdvOptions\",\n        \"description\": \"Virtual Server: Client SSL Advanced Options\",\n        \"displayName\": \"ProfileClientSSLAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityLogProfiles\",\n        \"description\": \"Virtual Server: Security Logging Profiles\",\n        \"displayName\": \"ProfileSecurityLogProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityIPBlacklist\",\n        \"description\": \"Virtual Server: IP Blacklist Profile\",\n        \"displayName\": \"ProfileSecurityIPBlacklist\",\n        \"isRequired\": false,\n        \"provider\": \"none\",\n        \"choices\": [\n          {\n            \"value\": \"none\",\n            \"description\": \"none\"\n          },\n          {\n            \"value\": \"enabled-block\",\n            \"description\": \"enabled-block\"\n          },\n          {\n            \"value\": \"enabled-log\",\n            \"description\": \"enabled-log\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__ProfileSecurityDoS\",\n        \"description\": \"Virtual Server: Security: DoS Profile\",\n        \"displayName\": \"ProfileSecurityDoS\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileAccess\",\n        \"description\": \"Virtual Server: Access Profile\",\n        \"displayName\": \"ProfileAccess\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileConnectivity\",\n        \"description\": \"Virtual Server: Connectivity Profile\",\n        \"displayName\": \"ProfileConnectivity\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfilePerRequest\",\n        \"description\": \"Virtual Server: Per-Request Profile\",\n        \"displayName\": \"ProfilePerRequest\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__OptionSourcePort\",\n        \"description\": \"Virtual Server: Source Port Behavior\",\n        \"displayName\": \"OptionSourcePort\",\n        \"isRequired\": false,\n        \"provider\": \"preserve\",\n        \"choices\": [\n          {\n            \"value\": \"preserve\",\n            \"description\": \"preserve\"\n          },\n          {\n            \"value\": \"preserve-strict\",\n            \"description\": \"preserve-strict\"\n          },\n          {\n            \"value\": \"change\",\n            \"description\": \"change\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__OptionConnectionMirroring\",\n        \"description\": \"Virtual Server: Connection Mirroring\",\n        \"displayName\": \"OptionConnectionMirroring\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\"\n      },\n      {\n        \"name\": \"vs__Irules\",\n        \"description\": \"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\",\n        \"displayName\": \"Irules\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvOptions\",\n        \"description\": \"Virtual Server: Advanced Options\",\n        \"displayName\": \"AdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvProfiles\",\n        \"description\": \"Virtual Server: Advanced Profiles\",\n        \"displayName\": \"AdvProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvPolicies\",\n        \"description\": \"Virtual Server: Advanced Policies\",\n        \"displayName\": \"AdvPolicies\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__VirtualAddrAdvOptions\",\n        \"description\": \"Virtual Address: Advanced Options\",\n        \"displayName\": \"VirtualAddrAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"l7policy__strategy\",\n        \"description\": \"L7 Policy: Match Strategy\",\n        \"displayName\": \"strategy\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/first-match\",\n        \"choices\": [\n          {\n            \"value\": \"\\/Common\\/first-match\",\n            \"description\": \"\\/Common\\/first-match\"\n          },\n          {\n            \"value\": \"\\/Common\\/best-match\",\n            \"description\": \"\\/Common\\/best-match\"\n          },\n          {\n            \"value\": \"\\/Common\\/all-match\",\n            \"description\": \"\\/Common\\/all-match\"\n          }\n        ]\n      },\n      {\n        \"name\": \"l7policy__defaultASM\",\n        \"description\": \"L7 Policy: Default ASM Policy\",\n        \"displayName\": \"defaultASM\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__defaultL7DOS\",\n        \"description\": \"L7 Policy: Default L7 DoS Policy\",\n        \"displayName\": \"defaultL7DOS\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"feature__statsTLS\",\n        \"description\": \"TLS\\/SSL: Stats Reporting\",\n        \"displayName\": \"statsTLS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsHTTP\",\n        \"description\": \"HTTP: Stats Reporting\",\n        \"displayName\": \"statsHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__insertXForwardedFor\",\n        \"description\": \"HTTP: Insert X-Forwarded-For Header\",\n        \"displayName\": \"insertXForwardedFor\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__redirectToHTTPS\",\n        \"description\": \"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\",\n        \"displayName\": \"redirectToHTTPS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__sslEasyCipher\",\n        \"description\": \"TLS\\/SSL: Easy Cipher String (overrides VS section setting)\",\n        \"displayName\": \"sslEasyCipher\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"compatible\",\n            \"description\": \"compatible\"\n          },\n          {\n            \"value\": \"medium\",\n            \"description\": \"medium\"\n          },\n          {\n            \"value\": \"high\",\n            \"description\": \"high\"\n          },\n          {\n            \"value\": \"tls_1.2\",\n            \"description\": \"tls_1.2\"\n          },\n          {\n            \"value\": \"tls_1.1+1.2\",\n            \"description\": \"tls_1.1+1.2\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__securityEnableHSTS\",\n        \"description\": \"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\",\n        \"displayName\": \"securityEnableHSTS\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"enabled-preload\",\n            \"description\": \"enabled-preload\"\n          },\n          {\n            \"value\": \"enabled-subdomain\",\n            \"description\": \"enabled-subdomain\"\n          },\n          {\n            \"value\": \"enabled-preload-subdomain\",\n            \"description\": \"enabled-preload-subdomain\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__easyL4Firewall\",\n        \"description\": \"Security: Firewall: Configure L4 Firewall Policy\",\n        \"displayName\": \"easyL4Firewall\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"base\",\n            \"description\": \"base\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_block\",\n            \"description\": \"base+ip_blacklist_block\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_log\",\n            \"description\": \"base+ip_blacklist_log\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"extensions__Field1\",\n        \"description\": \"Extensions: Field 1\",\n        \"displayName\": \"Field1\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field2\",\n        \"description\": \"Extensions: Field 2\",\n        \"displayName\": \"Field2\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field3\",\n        \"description\": \"Extensions: Field 3\",\n        \"displayName\": \"Field3\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"app_stats\",\n        \"description\": \"Enable health and performance monitoring.\",\n        \"displayName\": \"app_stats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      }\n    ],\n    \"tables\": [\n      {\n        \"name\": \"pool__Pools\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"displayName\": \"Index\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"displayName\": \"Name\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Description\",\n            \"description\": \"Description:\",\n            \"displayName\": \"Description\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"LbMethod\",\n            \"description\": \"LB Method:\",\n            \"displayName\": \"LbMethod\",\n            \"isRequired\": false,\n            \"defaultValue\": \"round-robin\",\n            \"choices\": [\n              {\n                \"value\": \"dynamic-ratio-member\",\n                \"description\": \"dynamic-ratio-member\"\n              },\n              {\n                \"value\": \"dynamic-ratio-node\",\n                \"description\": \"dynamic-ratio-node\"\n              },\n              {\n                \"value\": \"fastest-app-response\",\n                \"description\": \"fastest-app-response\"\n              },\n              {\n                \"value\": \"fastest-node\",\n                \"description\": \"fastest-node\"\n              },\n              {\n                \"value\": \"least-connections-member\",\n                \"description\": \"least-connections-member\"\n              },\n              {\n                \"value\": \"least-connections-node\",\n                \"description\": \"least-connections-node\"\n              },\n              {\n                \"value\": \"least-sessions\",\n                \"description\": \"least-sessions\"\n              },\n              {\n                \"value\": \"observed-member\",\n                \"description\": \"observed-member\"\n              },\n              {\n                \"value\": \"observed-node\",\n                \"description\": \"observed-node\"\n              },\n              {\n                \"value\": \"predictive-member\",\n                \"description\": \"predictive-member\"\n              },\n              {\n                \"value\": \"predictive-node\",\n                \"description\": \"predictive-node\"\n              },\n              {\n                \"value\": \"round-robin\",\n                \"description\": \"round-robin\"\n              },\n              {\n                \"value\": \"ratio-member\",\n                \"description\": \"ratio-member\"\n              },\n              {\n                \"value\": \"ratio-node\",\n                \"description\": \"ratio-node\"\n              },\n              {\n                \"value\": \"ratio-session\",\n                \"description\": \"ratio-session\"\n              },\n              {\n                \"value\": \"ratio-least-connections-member\",\n                \"description\": \"ratio-least-connections-member\"\n              },\n              {\n                \"value\": \"ratio-least-connections-node\",\n                \"description\": \"ratio-least-connections-node\"\n              },\n              {\n                \"value\": \"weighted-least-connections-member\",\n                \"description\": \"weighted-least-connections-member\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Monitor\",\n            \"description\": \"Monitor(s):\",\n            \"displayName\": \"Monitor\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"displayName\": \"AdvOptions\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Pool: Pool Table\"\n      },\n      {\n        \"name\": \"pool__Members\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Pool Idx:\",\n            \"displayName\": \"Index\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"IPAddress\",\n            \"description\": \"IP\\/Node Name:\",\n            \"displayName\": \"IPAddress\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\",\n            \"providerType\": \"NODE\"\n          },\n          {\n            \"name\": \"Port\",\n            \"description\": \"Port:\",\n            \"displayName\": \"Port\",\n            \"isRequired\": false,\n            \"defaultValue\": \"80\",\n            \"providerType\": \"PORT\"\n          },\n          {\n            \"name\": \"ConnectionLimit\",\n            \"description\": \"Connection Limit:\",\n            \"displayName\": \"ConnectionLimit\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Ratio\",\n            \"description\": \"Ratio:\",\n            \"displayName\": \"Ratio\",\n            \"isRequired\": false,\n            \"provider\": \"1\"\n          },\n          {\n            \"name\": \"PriorityGroup\",\n            \"description\": \"Priority Group:\",\n            \"displayName\": \"PriorityGroup\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"State\",\n            \"description\": \"State:\",\n            \"displayName\": \"State\",\n            \"isRequired\": false,\n            \"defaultValue\": \"enabled\",\n            \"choices\": [\n              {\n                \"value\": \"enabled\",\n                \"description\": \"enabled\"\n              },\n              {\n                \"value\": \"drain-disabled\",\n                \"description\": \"drain-disabled\"\n              },\n              {\n                \"value\": \"disabled\",\n                \"description\": \"disabled\"\n              }\n            ]\n          },\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"displayName\": \"AdvOptions\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Pool: Members\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"vs__Listeners\",\n        \"columns\": [\n          {\n            \"name\": \"Listener\",\n            \"description\": \"Listener:\",\n            \"displayName\": \"Listener\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Destination\",\n            \"description\": \"Destination\",\n            \"displayName\": \"Destination\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Additional Listeners\"\n      },\n      {\n        \"name\": \"vs__BundledItems\",\n        \"columns\": [\n          {\n            \"name\": \"Resource\",\n            \"description\": \"Resource:\",\n            \"displayName\": \"Resource\",\n            \"isRequired\": false,\n            \"provider\": \"\",\n            \"choices\": [\n              {\n                \"value\": \"** no bundled items **\",\n                \"description\": \"** no bundled items **\"\n              }\n            ]\n          }\n        ],\n        \"description\": \"Virtual Server: Bundled Items\"\n      },\n      {\n        \"name\": \"l7policy__rulesMatch\",\n        \"columns\": [\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"displayName\": \"Group\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Operand\",\n            \"description\": \"Operand:\",\n            \"displayName\": \"Operand\",\n            \"isRequired\": false,\n            \"provider\": \"\",\n            \"choices\": [\n              {\n                \"value\": \"client-ssl\\/request\\/cipher\",\n                \"description\": \"client-ssl\\/request\\/cipher\"\n              },\n              {\n                \"value\": \"client-ssl\\/request\\/cipher-bits\",\n                \"description\": \"client-ssl\\/request\\/cipher-bits\"\n              },\n              {\n                \"value\": \"client-ssl\\/request\\/protocol\",\n                \"description\": \"client-ssl\\/request\\/protocol\"\n              },\n              {\n                \"value\": \"client-ssl\\/response\\/cipher\",\n                \"description\": \"client-ssl\\/response\\/cipher\"\n              },\n              {\n                \"value\": \"client-ssl\\/response\\/cipher-bits\",\n                \"description\": \"client-ssl\\/response\\/cipher-bits\"\n              },\n              {\n                \"value\": \"client-ssl\\/response\\/protocol\",\n                \"description\": \"client-ssl\\/response\\/protocol\"\n              },\n              {\n                \"value\": \"http-basic-auth\\/request\\/username\",\n                \"description\": \"http-basic-auth\\/request\\/username\"\n              },\n              {\n                \"value\": \"http-basic-auth\\/request\\/password\",\n                \"description\": \"http-basic-auth\\/request\\/password\"\n              },\n              {\n                \"value\": \"http-cookie\\/request\\/all\\/name\\/<name>\",\n                \"description\": \"http-cookie\\/request\\/all\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/all\\/name\\/<name>\",\n                \"description\": \"http-header\\/request\\/all\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/all\\/name\\/<name>\",\n                \"description\": \"http-header\\/request\\/all\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-host\\/request\\/all\",\n                \"description\": \"http-host\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-host\\/request\\/host\",\n                \"description\": \"http-host\\/request\\/host\"\n              },\n              {\n                \"value\": \"http-host\\/request\\/port\",\n                \"description\": \"http-host\\/request\\/port\"\n              },\n              {\n                \"value\": \"http-method\\/request\\/all\",\n                \"description\": \"http-method\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/all\",\n                \"description\": \"http-referer\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/extension\",\n                \"description\": \"http-referer\\/request\\/extension\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/host\",\n                \"description\": \"http-referer\\/request\\/host\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/path\",\n                \"description\": \"http-referer\\/request\\/path\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/path-segment\\/index\\/<index>\",\n                \"description\": \"http-referer\\/request\\/path-segment\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/port\",\n                \"description\": \"http-referer\\/request\\/port\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/query-parameter\\/name\\/<name>\",\n                \"description\": \"http-referer\\/request\\/query-parameter\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/scheme\",\n                \"description\": \"http-referer\\/request\\/scheme\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/unnamed-query-parameter\\/index\\/<index>\",\n                \"description\": \"http-referer\\/request\\/unnamed-query-parameter\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/domain\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/domain\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/expiry\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/expiry\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/path\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/path\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/value\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/value\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/version\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/version\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-status\\/response\\/all\",\n                \"description\": \"http-status\\/response\\/all\"\n              },\n              {\n                \"value\": \"http-status\\/response\\/code\",\n                \"description\": \"http-status\\/response\\/code\"\n              },\n              {\n                \"value\": \"http-status\\/response\\/text\",\n                \"description\": \"http-status\\/response\\/text\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/all\",\n                \"description\": \"http-uri\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/extension\",\n                \"description\": \"http-uri\\/request\\/extension\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/host\",\n                \"description\": \"http-uri\\/request\\/host\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/path\",\n                \"description\": \"http-uri\\/request\\/path\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/path-segment\\/index\\/<index>\",\n                \"description\": \"http-uri\\/request\\/path-segment\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/port\",\n                \"description\": \"http-uri\\/request\\/port\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/query-parameter\\/name\\/<name>\",\n                \"description\": \"http-uri\\/request\\/query-parameter\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/scheme\",\n                \"description\": \"http-uri\\/request\\/scheme\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/unnamed-query-parameter\\/index\\/<index>\",\n                \"description\": \"http-uri\\/request\\/unnamed-query-parameter\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"http-version\\/request\\/all\",\n                \"description\": \"http-version\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-version\\/request\\/major\",\n                \"description\": \"http-version\\/request\\/major\"\n              },\n              {\n                \"value\": \"http-version\\/request\\/minor\",\n                \"description\": \"http-version\\/request\\/minor\"\n              },\n              {\n                \"value\": \"http-version\\/request\\/protocol\",\n                \"description\": \"http-version\\/request\\/protocol\"\n              },\n              {\n                \"value\": \"http-version\\/response\\/all\",\n                \"description\": \"http-version\\/response\\/all\"\n              },\n              {\n                \"value\": \"http-version\\/response\\/major\",\n                \"description\": \"http-version\\/response\\/major\"\n              },\n              {\n                \"value\": \"http-version\\/response\\/minor\",\n                \"description\": \"http-version\\/response\\/minor\"\n              },\n              {\n                \"value\": \"http-version\\/response\\/protocol\",\n                \"description\": \"http-version\\/response\\/protocol\"\n              },\n              {\n                \"value\": \"ssl-cert\\/ssl-server-handshake\\/common-name\\/index\\/<index>\",\n                \"description\": \"ssl-cert\\/ssl-server-handshake\\/common-name\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-client-hello\\/alpn\",\n                \"description\": \"ssl-extension\\/ssl-client-hello\\/alpn\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-client-hello\\/npn\",\n                \"description\": \"ssl-extension\\/ssl-client-hello\\/npn\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-client-hello\\/server-name\",\n                \"description\": \"ssl-extension\\/ssl-client-hello\\/server-name\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-server-hello\\/alpn\",\n                \"description\": \"ssl-extension\\/ssl-server-hello\\/alpn\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-server-hello\\/npn\",\n                \"description\": \"ssl-extension\\/ssl-server-hello\\/npn\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-server-hello\\/server-name\",\n                \"description\": \"ssl-extension\\/ssl-server-hello\\/server-name\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/mss\\/internal\",\n                \"description\": \"tcp\\/request\\/mss\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/port\\/internal\",\n                \"description\": \"tcp\\/request\\/port\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/port\\/local\",\n                \"description\": \"tcp\\/request\\/port\\/local\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/route-domain\\/internal\",\n                \"description\": \"tcp\\/request\\/route-domain\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/rtt\\/internal\",\n                \"description\": \"tcp\\/request\\/rtt\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/vlan\\/internal\",\n                \"description\": \"tcp\\/request\\/vlan\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/vlan-id\\/internal\",\n                \"description\": \"tcp\\/request\\/vlan-id\\/internal\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Negate\",\n            \"description\": \"Negate:\",\n            \"displayName\": \"Negate\",\n            \"isRequired\": false,\n            \"provider\": \"no\",\n            \"choices\": [\n              {\n                \"value\": \"no\",\n                \"description\": \"no\"\n              },\n              {\n                \"value\": \"yes\",\n                \"description\": \"yes\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Condition\",\n            \"description\": \"Condition:\",\n            \"displayName\": \"Condition\",\n            \"isRequired\": false,\n            \"provider\": \"\",\n            \"choices\": [\n              {\n                \"value\": \"equals\",\n                \"description\": \"equals\"\n              },\n              {\n                \"value\": \"starts-with\",\n                \"description\": \"starts-with\"\n              },\n              {\n                \"value\": \"ends-with\",\n                \"description\": \"ends-with\"\n              },\n              {\n                \"value\": \"contains\",\n                \"description\": \"contains\"\n              },\n              {\n                \"value\": \"greater\",\n                \"description\": \"greater\"\n              },\n              {\n                \"value\": \"greater-or-equal\",\n                \"description\": \"greater-or-equal\"\n              },\n              {\n                \"value\": \"less\",\n                \"description\": \"less\"\n              },\n              {\n                \"value\": \"less-or-equal\",\n                \"description\": \"less-or-equal\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Value\",\n            \"description\": \"Value:\",\n            \"displayName\": \"Value\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"CaseSensitive\",\n            \"description\": \"Case Sensitive:\",\n            \"displayName\": \"CaseSensitive\",\n            \"isRequired\": false,\n            \"provider\": \"no\",\n            \"choices\": [\n              {\n                \"value\": \"no\",\n                \"description\": \"no\"\n              },\n              {\n                \"value\": \"yes\",\n                \"description\": \"yes\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Missing\",\n            \"description\": \"Missing:\",\n            \"displayName\": \"Missing\",\n            \"isRequired\": false,\n            \"provider\": \"no\",\n            \"choices\": [\n              {\n                \"value\": \"no\",\n                \"description\": \"no\"\n              },\n              {\n                \"value\": \"yes\",\n                \"description\": \"yes\"\n              }\n            ]\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Matching\"\n      },\n      {\n        \"name\": \"l7policy__rulesAction\",\n        \"columns\": [\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"displayName\": \"Group\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Target\",\n            \"description\": \"Target:\",\n            \"displayName\": \"Target\",\n            \"isRequired\": false,\n            \"provider\": \"\",\n            \"choices\": [\n              {\n                \"value\": \"asm\\/request\\/enable\\/policy\",\n                \"description\": \"asm\\/request\\/enable\\/policy\"\n              },\n              {\n                \"value\": \"asm\\/request\\/disable\",\n                \"description\": \"asm\\/request\\/disable\"\n              },\n              {\n                \"value\": \"cache\\/request\\/enable\\/pin\",\n                \"description\": \"cache\\/request\\/enable\\/pin\"\n              },\n              {\n                \"value\": \"cache\\/request\\/disable\",\n                \"description\": \"cache\\/request\\/disable\"\n              },\n              {\n                \"value\": \"cache\\/response\\/enable\\/pin\",\n                \"description\": \"cache\\/response\\/enable\\/pin\"\n              },\n              {\n                \"value\": \"cache\\/respones\\/disable\",\n                \"description\": \"cache\\/respones\\/disable\"\n              },\n              {\n                \"value\": \"compress\\/request\\/enable\",\n                \"description\": \"compress\\/request\\/enable\"\n              },\n              {\n                \"value\": \"compress\\/request\\/disable\",\n                \"description\": \"compress\\/request\\/disable\"\n              },\n              {\n                \"value\": \"compress\\/response\\/enable\",\n                \"description\": \"compress\\/response\\/enable\"\n              },\n              {\n                \"value\": \"compress\\/response\\/disable\",\n                \"description\": \"compress\\/response\\/disable\"\n              },\n              {\n                \"value\": \"decompress\\/request\\/enable\",\n                \"description\": \"decompress\\/request\\/enable\"\n              },\n              {\n                \"value\": \"decompress\\/request\\/disable\",\n                \"description\": \"decompress\\/request\\/disable\"\n              },\n              {\n                \"value\": \"decompress\\/response\\/enable\",\n                \"description\": \"decompress\\/response\\/enable\"\n              },\n              {\n                \"value\": \"decompress\\/response\\/disable\",\n                \"description\": \"decompress\\/response\\/disable\"\n              },\n              {\n                \"value\": \"forward\\/request\\/reset\",\n                \"description\": \"forward\\/request\\/reset\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/clone-pool\",\n                \"description\": \"forward\\/request\\/select\\/clone-pool\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/member\",\n                \"description\": \"forward\\/request\\/select\\/member\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/nexthop\",\n                \"description\": \"forward\\/request\\/select\\/nexthop\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/node\",\n                \"description\": \"forward\\/request\\/select\\/node\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/pool\",\n                \"description\": \"forward\\/request\\/select\\/pool\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/rateclass\",\n                \"description\": \"forward\\/request\\/select\\/rateclass\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/snat\",\n                \"description\": \"forward\\/request\\/select\\/snat\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/snatpool\",\n                \"description\": \"forward\\/request\\/select\\/snatpool\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/vlan\",\n                \"description\": \"forward\\/request\\/select\\/vlan\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/vlan-id\",\n                \"description\": \"forward\\/request\\/select\\/vlan-id\"\n              },\n              {\n                \"value\": \"http\\/request\\/enable\",\n                \"description\": \"http\\/request\\/enable\"\n              },\n              {\n                \"value\": \"http\\/request\\/disable\",\n                \"description\": \"http\\/request\\/disable\"\n              },\n              {\n                \"value\": \"http-cookie\\/request\\/insert\\/name,value\",\n                \"description\": \"http-cookie\\/request\\/insert\\/name,value\"\n              },\n              {\n                \"value\": \"http-cookie\\/request\\/remove\\/name\",\n                \"description\": \"http-cookie\\/request\\/remove\\/name\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/insert\\/name,value\",\n                \"description\": \"http-header\\/request\\/insert\\/name,value\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/remove\\/name\",\n                \"description\": \"http-header\\/request\\/remove\\/name\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/replace\\/name,value\",\n                \"description\": \"http-header\\/request\\/replace\\/name,value\"\n              },\n              {\n                \"value\": \"http-header\\/response\\/insert\\/name,value\",\n                \"description\": \"http-header\\/response\\/insert\\/name,value\"\n              },\n              {\n                \"value\": \"http-header\\/response\\/remove\\/name\",\n                \"description\": \"http-header\\/response\\/remove\\/name\"\n              },\n              {\n                \"value\": \"http-header\\/response\\/replace\\/name,value\",\n                \"description\": \"http-header\\/response\\/replace\\/name,value\"\n              },\n              {\n                \"value\": \"http-host\\/request\\/replace\\/value\",\n                \"description\": \"http-host\\/request\\/replace\\/value\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/insert\\/value\",\n                \"description\": \"http-referer\\/request\\/insert\\/value\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/remove\",\n                \"description\": \"http-referer\\/request\\/remove\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/replace\\/value\",\n                \"description\": \"http-referer\\/request\\/replace\\/value\"\n              },\n              {\n                \"value\": \"http-reply\\/request\\/redirect\\/location\",\n                \"description\": \"http-reply\\/request\\/redirect\\/location\"\n              },\n              {\n                \"value\": \"http-reply\\/response\\/redirect\\/location\",\n                \"description\": \"http-reply\\/response\\/redirect\\/location\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/insert\\/name,domain,path,value\",\n                \"description\": \"http-set-cookie\\/response\\/insert\\/name,domain,path,value\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/remove\\/name\",\n                \"description\": \"http-set-cookie\\/response\\/remove\\/name\"\n              },\n              {\n                \"value\": \"http-uri\\/response\\/replace\\/path,query-string,value\",\n                \"description\": \"http-uri\\/response\\/replace\\/path,query-string,value\"\n              },\n              {\n                \"value\": \"l7dos\\/request\\/enable\\/from-profile\",\n                \"description\": \"l7dos\\/request\\/enable\\/from-profile\"\n              },\n              {\n                \"value\": \"l7dos\\/request\\/disable\",\n                \"description\": \"l7dos\\/request\\/disable\"\n              },\n              {\n                \"value\": \"log\\/request\\/write\\/message\",\n                \"description\": \"log\\/request\\/write\\/message\"\n              },\n              {\n                \"value\": \"log\\/response\\/write\\/message\",\n                \"description\": \"log\\/response\\/write\\/message\"\n              },\n              {\n                \"value\": \"request-adapt\\/request\\/enable\\/internal-virtual-server\",\n                \"description\": \"request-adapt\\/request\\/enable\\/internal-virtual-server\"\n              },\n              {\n                \"value\": \"request-adapt\\/request\\/disable\",\n                \"description\": \"request-adapt\\/request\\/disable\"\n              },\n              {\n                \"value\": \"request-adapt\\/response\\/enable\\/internal-virtual-server\",\n                \"description\": \"request-adapt\\/response\\/enable\\/internal-virtual-server\"\n              },\n              {\n                \"value\": \"request-adapt\\/response\\/disable\",\n                \"description\": \"request-adapt\\/response\\/disable\"\n              },\n              {\n                \"value\": \"response-adapt\\/request\\/enable\\/internal-virtual-server\",\n                \"description\": \"response-adapt\\/request\\/enable\\/internal-virtual-server\"\n              },\n              {\n                \"value\": \"response-adapt\\/request\\/disable\",\n                \"description\": \"response-adapt\\/request\\/disable\"\n              },\n              {\n                \"value\": \"response-adapt\\/response\\/enable\\/internal-virtual-server\",\n                \"description\": \"response-adapt\\/response\\/enable\\/internal-virtual-server\"\n              },\n              {\n                \"value\": \"request-adapt\\/response\\/disable\",\n                \"description\": \"request-adapt\\/response\\/disable\"\n              },\n              {\n                \"value\": \"server-ssl\\/request\\/enable\",\n                \"description\": \"server-ssl\\/request\\/enable\"\n              },\n              {\n                \"value\": \"server-ssl\\/request\\/disable\",\n                \"description\": \"server-ssl\\/request\\/disable\"\n              },\n              {\n                \"value\": \"tcl\\/request\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/request\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcl\\/response\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/response\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcl\\/ssl-client-hello\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/ssl-client-hello\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcl\\/ssl-server-handshake\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/ssl-server-handshake\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcl\\/ssl-server-hello\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/ssl-server-hello\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcp-nagle\\/request\\/enable\",\n                \"description\": \"tcp-nagle\\/request\\/enable\"\n              },\n              {\n                \"value\": \"tcp-nagle\\/request\\/disable\",\n                \"description\": \"tcp-nagle\\/request\\/disable\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Parameter\",\n            \"description\": \"Parameter:\",\n            \"displayName\": \"Parameter\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Action\"\n      },\n      {\n        \"name\": \"feature__easyL4FirewallBlacklist\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"displayName\": \"CIDRRange\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"feature__easyL4FirewallSourceList\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"displayName\": \"CIDRRange\",\n            \"isRequired\": false,\n            \"provider\": \"0.0.0.0\\/0\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"monitor__Monitors\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"displayName\": \"Index\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"displayName\": \"Name\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\\/Common\\/tcp\"\n          },\n          {\n            \"name\": \"Type\",\n            \"description\": \"Type:\",\n            \"displayName\": \"Type\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Options\",\n            \"description\": \"Options:\",\n            \"displayName\": \"Options\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Monitor: Monitor Table\"\n      }\n    ]\n  }\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "f5-fastl4-udp-lb Template",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"templateName\",",
									"            \"value\":\"f5-fastl4-udp-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/provider/templates/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"templateName\": \"f5-fastl4-udp-lb\",\n  \"parentReference\": {\n    \"link\":\"/mgmt/cm/cloud/templates/iapp/{{iwf_appsvcs_name}}\"\n  },\n  \"properties\": [\n  {\n        \"id\": \"cloudConnectorReference\",\n        \"displayName\": \"Cloud Connector\",\n        \"isRequired\": true\n    }\n  ],\n  \"sectionOrderOfPresentation\": [\n\t  \"iApp Options\",\n\t  \"Virtual Server Listener & Pool Configuration\",\n\t  \"Pool Monitor(s) Configuration\",\n\t  \"Virtual Server Configuration\",\n\t  \"L7 Traffic Policy\",\n\t  \"L4-7 Helpers\",\n\t  \"Custom Extensions Section\"\n  ],\n  \"overrides\": {\n    \"vars\": [\n      {\n        \"name\": \"iapp__strictUpdates\",\n        \"description\": \"iApp: Strict Updates\",\n        \"displayName\": \"strictUpdates\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      },\n      {\n        \"name\": \"iapp__appStats\",\n        \"description\": \"iApp: Statistics Handler Creation\",\n        \"displayName\": \"appStats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      },\n      {\n        \"name\": \"iapp__mode\",\n        \"description\": \"iApp: Mode\",\n        \"displayName\": \"mode\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__logLevel\",\n        \"description\": \"iApp: Log Level\",\n        \"displayName\": \"logLevel\",\n        \"isRequired\": false,\n        \"provider\": \"7\"\n      },\n      {\n        \"name\": \"iapp__routeDomain\",\n        \"description\": \"iApp: Route Domain\",\n        \"displayName\": \"routeDomain\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__asmDeployMode\",\n        \"description\": \"iApp: ASM: Deployment Mode\",\n        \"displayName\": \"asmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__apmDeployMode\",\n        \"description\": \"iApp: APM: Deployment Mode\",\n        \"displayName\": \"apmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"pool__addr\",\n        \"description\": \"Virtual Server: Address\",\n        \"displayName\": \"addr\",\n        \"isRequired\": true,\n        \"defaultValue\": \"\",\n        \"providerType\": \"NODE\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"pool__mask\",\n        \"description\": \"Virtual Server: Mask\",\n        \"displayName\": \"mask\",\n        \"isRequired\": true,\n        \"provider\": \"255.255.255.255\"\n      },\n      {\n        \"name\": \"pool__port\",\n        \"description\": \"Virtual Server: Port\",\n        \"displayName\": \"port\",\n        \"isRequired\": true,\n        \"defaultValue\": \"\",\n        \"providerType\": \"PORT\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"pool__DefaultPoolIndex\",\n        \"description\": \"Virtual Server: Default Pool Index\",\n        \"displayName\": \"DefaultPoolIndex\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"pool__MemberDefaultPort\",\n        \"description\": \"Pool: Member Default Port\",\n        \"displayName\": \"MemberDefaultPort\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__Name\",\n        \"description\": \"Virtual Server: Name\",\n        \"displayName\": \"Name\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__Description\",\n        \"description\": \"Virtual Server: Description\",\n        \"displayName\": \"Description\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__RouteAdv\",\n        \"description\": \"Virtual Server: Route Advertisement\",\n        \"displayName\": \"RouteAdv\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          },\n          {\n            \"value\": \"all_vs\",\n            \"description\": \"all_vs\"\n          },\n          {\n            \"value\": \"any_vs\",\n            \"description\": \"any_vs\"\n          },\n          {\n            \"value\": \"always\",\n            \"description\": \"always\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__SourceAddress\",\n        \"description\": \"Virtual Server: Source Address\",\n        \"displayName\": \"SourceAddress\",\n        \"isRequired\": false,\n        \"provider\": \"0.0.0.0\\/0\"\n      },\n      {\n        \"name\": \"vs__IpProtocol\",\n        \"description\": \"Virtual Server: IP Protocol\",\n        \"displayName\": \"IpProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"udp\"\n      },\n      {\n        \"name\": \"vs__ConnectionLimit\",\n        \"description\": \"Virtual Server: Virtual Server Connection Limit (0=unlimited)\",\n        \"displayName\": \"ConnectionLimit\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"vs__ProfileClientProtocol\",\n        \"description\": \"Virtual Server: Client-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileClientProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/fastL4\"\n      },\n      {\n        \"name\": \"vs__ProfileServerProtocol\",\n        \"description\": \"Virtual Server: Server-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileServerProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/fastL4\"\n      },\n      {\n        \"name\": \"vs__ProfileHTTP\",\n        \"description\": \"Virtual Server: HTTP Profile\",\n        \"displayName\": \"ProfileHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileOneConnect\",\n        \"description\": \"Virtual Server: OneConnect Profile\",\n        \"displayName\": \"ProfileOneConnect\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileCompression\",\n        \"description\": \"Virtual Server: Compression Profile\",\n        \"displayName\": \"ProfileCompression\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileAnalytics\",\n        \"description\": \"Virtual Server: Analytics Profile\",\n        \"displayName\": \"ProfileAnalytics\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileRequestLogging\",\n        \"description\": \"Virtual Server: Request Logging Profile\",\n        \"displayName\": \"ProfileRequestLogging\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileDefaultPersist\",\n        \"description\": \"Virtual Server: Default Persistence Profile\",\n        \"displayName\": \"ProfileDefaultPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileFallbackPersist\",\n        \"description\": \"Virtual Server: Fallback Persistence Profile\",\n        \"displayName\": \"ProfileFallbackPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__SNATConfig\",\n        \"description\": \"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\",\n        \"displayName\": \"SNATConfig\",\n        \"isRequired\": false,\n        \"provider\": \"automap\"\n      },\n      {\n        \"name\": \"vs__ProfileServerSSL\",\n        \"description\": \"Virtual Server: Server SSL Profile\",\n        \"displayName\": \"ProfileServerSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSL\",\n        \"description\": \"Virtual Server: Client SSL Profile\",\n        \"displayName\": \"ProfileClientSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCert\",\n        \"description\": \"Virtual Server: Client SSL Certificate\",\n        \"displayName\": \"ProfileClientSSLCert\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLKey\",\n        \"description\": \"Virtual Server: Client SSL Key\",\n        \"displayName\": \"ProfileClientSSLKey\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLChain\",\n        \"description\": \"Virtual Server: Client SSL Certificate Chain\",\n        \"displayName\": \"ProfileClientSSLChain\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCipherString\",\n        \"description\": \"Virtual Server: Client SSL Cipher String\",\n        \"displayName\": \"ProfileClientSSLCipherString\",\n        \"isRequired\": false,\n        \"provider\": \"DEFAULT\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLAdvOptions\",\n        \"description\": \"Virtual Server: Client SSL Advanced Options\",\n        \"displayName\": \"ProfileClientSSLAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityLogProfiles\",\n        \"description\": \"Virtual Server: Security Logging Profiles\",\n        \"displayName\": \"ProfileSecurityLogProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityIPBlacklist\",\n        \"description\": \"Virtual Server: IP Blacklist Profile\",\n        \"displayName\": \"ProfileSecurityIPBlacklist\",\n        \"isRequired\": false,\n        \"provider\": \"none\",\n        \"choices\": [\n          {\n            \"value\": \"none\",\n            \"description\": \"none\"\n          },\n          {\n            \"value\": \"enabled-block\",\n            \"description\": \"enabled-block\"\n          },\n          {\n            \"value\": \"enabled-log\",\n            \"description\": \"enabled-log\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__ProfileSecurityDoS\",\n        \"description\": \"Virtual Server: Security: DoS Profile\",\n        \"displayName\": \"ProfileSecurityDoS\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileAccess\",\n        \"description\": \"Virtual Server: Access Profile\",\n        \"displayName\": \"ProfileAccess\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileConnectivity\",\n        \"description\": \"Virtual Server: Connectivity Profile\",\n        \"displayName\": \"ProfileConnectivity\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfilePerRequest\",\n        \"description\": \"Virtual Server: Per-Request Profile\",\n        \"displayName\": \"ProfilePerRequest\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__OptionSourcePort\",\n        \"description\": \"Virtual Server: Source Port Behavior\",\n        \"displayName\": \"OptionSourcePort\",\n        \"isRequired\": false,\n        \"provider\": \"preserve\",\n        \"choices\": [\n          {\n            \"value\": \"preserve\",\n            \"description\": \"preserve\"\n          },\n          {\n            \"value\": \"preserve-strict\",\n            \"description\": \"preserve-strict\"\n          },\n          {\n            \"value\": \"change\",\n            \"description\": \"change\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__OptionConnectionMirroring\",\n        \"description\": \"Virtual Server: Connection Mirroring\",\n        \"displayName\": \"OptionConnectionMirroring\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\"\n      },\n      {\n        \"name\": \"vs__Irules\",\n        \"description\": \"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\",\n        \"displayName\": \"Irules\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvOptions\",\n        \"description\": \"Virtual Server: Advanced Options\",\n        \"displayName\": \"AdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvProfiles\",\n        \"description\": \"Virtual Server: Advanced Profiles\",\n        \"displayName\": \"AdvProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvPolicies\",\n        \"description\": \"Virtual Server: Advanced Policies\",\n        \"displayName\": \"AdvPolicies\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__VirtualAddrAdvOptions\",\n        \"description\": \"Virtual Address: Advanced Options\",\n        \"displayName\": \"VirtualAddrAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"l7policy__strategy\",\n        \"description\": \"L7 Policy: Match Strategy\",\n        \"displayName\": \"strategy\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/first-match\",\n        \"choices\": [\n          {\n            \"value\": \"\\/Common\\/first-match\",\n            \"description\": \"\\/Common\\/first-match\"\n          },\n          {\n            \"value\": \"\\/Common\\/best-match\",\n            \"description\": \"\\/Common\\/best-match\"\n          },\n          {\n            \"value\": \"\\/Common\\/all-match\",\n            \"description\": \"\\/Common\\/all-match\"\n          }\n        ]\n      },\n      {\n        \"name\": \"l7policy__defaultASM\",\n        \"description\": \"L7 Policy: Default ASM Policy\",\n        \"displayName\": \"defaultASM\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__defaultL7DOS\",\n        \"description\": \"L7 Policy: Default L7 DoS Policy\",\n        \"displayName\": \"defaultL7DOS\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"feature__statsTLS\",\n        \"description\": \"TLS\\/SSL: Stats Reporting\",\n        \"displayName\": \"statsTLS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsHTTP\",\n        \"description\": \"HTTP: Stats Reporting\",\n        \"displayName\": \"statsHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__insertXForwardedFor\",\n        \"description\": \"HTTP: Insert X-Forwarded-For Header\",\n        \"displayName\": \"insertXForwardedFor\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__redirectToHTTPS\",\n        \"description\": \"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\",\n        \"displayName\": \"redirectToHTTPS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__sslEasyCipher\",\n        \"description\": \"TLS\\/SSL: Easy Cipher String (overrides VS section setting)\",\n        \"displayName\": \"sslEasyCipher\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"compatible\",\n            \"description\": \"compatible\"\n          },\n          {\n            \"value\": \"medium\",\n            \"description\": \"medium\"\n          },\n          {\n            \"value\": \"high\",\n            \"description\": \"high\"\n          },\n          {\n            \"value\": \"tls_1.2\",\n            \"description\": \"tls_1.2\"\n          },\n          {\n            \"value\": \"tls_1.1+1.2\",\n            \"description\": \"tls_1.1+1.2\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__securityEnableHSTS\",\n        \"description\": \"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\",\n        \"displayName\": \"securityEnableHSTS\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"enabled-preload\",\n            \"description\": \"enabled-preload\"\n          },\n          {\n            \"value\": \"enabled-subdomain\",\n            \"description\": \"enabled-subdomain\"\n          },\n          {\n            \"value\": \"enabled-preload-subdomain\",\n            \"description\": \"enabled-preload-subdomain\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__easyL4Firewall\",\n        \"description\": \"Security: Firewall: Configure L4 Firewall Policy\",\n        \"displayName\": \"easyL4Firewall\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"base\",\n            \"description\": \"base\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_block\",\n            \"description\": \"base+ip_blacklist_block\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_log\",\n            \"description\": \"base+ip_blacklist_log\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"extensions__Field1\",\n        \"description\": \"Extensions: Field 1\",\n        \"displayName\": \"Field1\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field2\",\n        \"description\": \"Extensions: Field 2\",\n        \"displayName\": \"Field2\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field3\",\n        \"description\": \"Extensions: Field 3\",\n        \"displayName\": \"Field3\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"app_stats\",\n        \"description\": \"Enable health and performance monitoring.\",\n        \"displayName\": \"app_stats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      }\n    ],\n    \"tables\": [\n      {\n        \"name\": \"pool__Pools\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"displayName\": \"Index\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"displayName\": \"Name\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Description\",\n            \"description\": \"Description:\",\n            \"displayName\": \"Description\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"LbMethod\",\n            \"description\": \"LB Method:\",\n            \"displayName\": \"LbMethod\",\n            \"isRequired\": false,\n            \"defaultValue\": \"round-robin\",\n            \"choices\": [\n              {\n                \"value\": \"dynamic-ratio-member\",\n                \"description\": \"dynamic-ratio-member\"\n              },\n              {\n                \"value\": \"dynamic-ratio-node\",\n                \"description\": \"dynamic-ratio-node\"\n              },\n              {\n                \"value\": \"fastest-app-response\",\n                \"description\": \"fastest-app-response\"\n              },\n              {\n                \"value\": \"fastest-node\",\n                \"description\": \"fastest-node\"\n              },\n              {\n                \"value\": \"least-connections-member\",\n                \"description\": \"least-connections-member\"\n              },\n              {\n                \"value\": \"least-connections-node\",\n                \"description\": \"least-connections-node\"\n              },\n              {\n                \"value\": \"least-sessions\",\n                \"description\": \"least-sessions\"\n              },\n              {\n                \"value\": \"observed-member\",\n                \"description\": \"observed-member\"\n              },\n              {\n                \"value\": \"observed-node\",\n                \"description\": \"observed-node\"\n              },\n              {\n                \"value\": \"predictive-member\",\n                \"description\": \"predictive-member\"\n              },\n              {\n                \"value\": \"predictive-node\",\n                \"description\": \"predictive-node\"\n              },\n              {\n                \"value\": \"round-robin\",\n                \"description\": \"round-robin\"\n              },\n              {\n                \"value\": \"ratio-member\",\n                \"description\": \"ratio-member\"\n              },\n              {\n                \"value\": \"ratio-node\",\n                \"description\": \"ratio-node\"\n              },\n              {\n                \"value\": \"ratio-session\",\n                \"description\": \"ratio-session\"\n              },\n              {\n                \"value\": \"ratio-least-connections-member\",\n                \"description\": \"ratio-least-connections-member\"\n              },\n              {\n                \"value\": \"ratio-least-connections-node\",\n                \"description\": \"ratio-least-connections-node\"\n              },\n              {\n                \"value\": \"weighted-least-connections-member\",\n                \"description\": \"weighted-least-connections-member\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Monitor\",\n            \"description\": \"Monitor(s):\",\n            \"displayName\": \"Monitor\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"displayName\": \"AdvOptions\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Pool: Pool Table\"\n      },\n      {\n        \"name\": \"pool__Members\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Pool Idx:\",\n            \"displayName\": \"Index\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"IPAddress\",\n            \"description\": \"IP\\/Node Name:\",\n            \"displayName\": \"IPAddress\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\",\n            \"providerType\": \"NODE\"\n          },\n          {\n            \"name\": \"Port\",\n            \"description\": \"Port:\",\n            \"displayName\": \"Port\",\n            \"isRequired\": false,\n            \"defaultValue\": \"80\",\n            \"providerType\": \"PORT\"\n          },\n          {\n            \"name\": \"ConnectionLimit\",\n            \"description\": \"Connection Limit:\",\n            \"displayName\": \"ConnectionLimit\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Ratio\",\n            \"description\": \"Ratio:\",\n            \"displayName\": \"Ratio\",\n            \"isRequired\": false,\n            \"provider\": \"1\"\n          },\n          {\n            \"name\": \"PriorityGroup\",\n            \"description\": \"Priority Group:\",\n            \"displayName\": \"PriorityGroup\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"State\",\n            \"description\": \"State:\",\n            \"displayName\": \"State\",\n            \"isRequired\": false,\n            \"defaultValue\": \"enabled\",\n            \"choices\": [\n              {\n                \"value\": \"enabled\",\n                \"description\": \"enabled\"\n              },\n              {\n                \"value\": \"drain-disabled\",\n                \"description\": \"drain-disabled\"\n              },\n              {\n                \"value\": \"disabled\",\n                \"description\": \"disabled\"\n              }\n            ]\n          },\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"displayName\": \"AdvOptions\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Pool: Members\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"vs__Listeners\",\n        \"columns\": [\n          {\n            \"name\": \"Listener\",\n            \"description\": \"Listener:\",\n            \"displayName\": \"Listener\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Destination\",\n            \"description\": \"Destination\",\n            \"displayName\": \"Destination\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Additional Listeners\"\n      },\n      {\n        \"name\": \"vs__BundledItems\",\n        \"columns\": [\n          {\n            \"name\": \"Resource\",\n            \"description\": \"Resource:\",\n            \"displayName\": \"Resource\",\n            \"isRequired\": false,\n            \"provider\": \"\",\n            \"choices\": [\n              {\n                \"value\": \"** no bundled items **\",\n                \"description\": \"** no bundled items **\"\n              }\n            ]\n          }\n        ],\n        \"description\": \"Virtual Server: Bundled Items\"\n      },\n      {\n        \"name\": \"l7policy__rulesMatch\",\n        \"columns\": [\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"displayName\": \"Group\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Operand\",\n            \"description\": \"Operand:\",\n            \"displayName\": \"Operand\",\n            \"isRequired\": false,\n            \"provider\": \"\",\n            \"choices\": [\n              {\n                \"value\": \"client-ssl\\/request\\/cipher\",\n                \"description\": \"client-ssl\\/request\\/cipher\"\n              },\n              {\n                \"value\": \"client-ssl\\/request\\/cipher-bits\",\n                \"description\": \"client-ssl\\/request\\/cipher-bits\"\n              },\n              {\n                \"value\": \"client-ssl\\/request\\/protocol\",\n                \"description\": \"client-ssl\\/request\\/protocol\"\n              },\n              {\n                \"value\": \"client-ssl\\/response\\/cipher\",\n                \"description\": \"client-ssl\\/response\\/cipher\"\n              },\n              {\n                \"value\": \"client-ssl\\/response\\/cipher-bits\",\n                \"description\": \"client-ssl\\/response\\/cipher-bits\"\n              },\n              {\n                \"value\": \"client-ssl\\/response\\/protocol\",\n                \"description\": \"client-ssl\\/response\\/protocol\"\n              },\n              {\n                \"value\": \"http-basic-auth\\/request\\/username\",\n                \"description\": \"http-basic-auth\\/request\\/username\"\n              },\n              {\n                \"value\": \"http-basic-auth\\/request\\/password\",\n                \"description\": \"http-basic-auth\\/request\\/password\"\n              },\n              {\n                \"value\": \"http-cookie\\/request\\/all\\/name\\/<name>\",\n                \"description\": \"http-cookie\\/request\\/all\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/all\\/name\\/<name>\",\n                \"description\": \"http-header\\/request\\/all\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/all\\/name\\/<name>\",\n                \"description\": \"http-header\\/request\\/all\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-host\\/request\\/all\",\n                \"description\": \"http-host\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-host\\/request\\/host\",\n                \"description\": \"http-host\\/request\\/host\"\n              },\n              {\n                \"value\": \"http-host\\/request\\/port\",\n                \"description\": \"http-host\\/request\\/port\"\n              },\n              {\n                \"value\": \"http-method\\/request\\/all\",\n                \"description\": \"http-method\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/all\",\n                \"description\": \"http-referer\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/extension\",\n                \"description\": \"http-referer\\/request\\/extension\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/host\",\n                \"description\": \"http-referer\\/request\\/host\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/path\",\n                \"description\": \"http-referer\\/request\\/path\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/path-segment\\/index\\/<index>\",\n                \"description\": \"http-referer\\/request\\/path-segment\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/port\",\n                \"description\": \"http-referer\\/request\\/port\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/query-parameter\\/name\\/<name>\",\n                \"description\": \"http-referer\\/request\\/query-parameter\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/scheme\",\n                \"description\": \"http-referer\\/request\\/scheme\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/unnamed-query-parameter\\/index\\/<index>\",\n                \"description\": \"http-referer\\/request\\/unnamed-query-parameter\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/domain\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/domain\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/expiry\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/expiry\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/path\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/path\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/value\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/value\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/version\\/name\\/<name>\",\n                \"description\": \"http-set-cookie\\/response\\/version\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-status\\/response\\/all\",\n                \"description\": \"http-status\\/response\\/all\"\n              },\n              {\n                \"value\": \"http-status\\/response\\/code\",\n                \"description\": \"http-status\\/response\\/code\"\n              },\n              {\n                \"value\": \"http-status\\/response\\/text\",\n                \"description\": \"http-status\\/response\\/text\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/all\",\n                \"description\": \"http-uri\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/extension\",\n                \"description\": \"http-uri\\/request\\/extension\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/host\",\n                \"description\": \"http-uri\\/request\\/host\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/path\",\n                \"description\": \"http-uri\\/request\\/path\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/path-segment\\/index\\/<index>\",\n                \"description\": \"http-uri\\/request\\/path-segment\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/port\",\n                \"description\": \"http-uri\\/request\\/port\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/query-parameter\\/name\\/<name>\",\n                \"description\": \"http-uri\\/request\\/query-parameter\\/name\\/<name>\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/scheme\",\n                \"description\": \"http-uri\\/request\\/scheme\"\n              },\n              {\n                \"value\": \"http-uri\\/request\\/unnamed-query-parameter\\/index\\/<index>\",\n                \"description\": \"http-uri\\/request\\/unnamed-query-parameter\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"http-version\\/request\\/all\",\n                \"description\": \"http-version\\/request\\/all\"\n              },\n              {\n                \"value\": \"http-version\\/request\\/major\",\n                \"description\": \"http-version\\/request\\/major\"\n              },\n              {\n                \"value\": \"http-version\\/request\\/minor\",\n                \"description\": \"http-version\\/request\\/minor\"\n              },\n              {\n                \"value\": \"http-version\\/request\\/protocol\",\n                \"description\": \"http-version\\/request\\/protocol\"\n              },\n              {\n                \"value\": \"http-version\\/response\\/all\",\n                \"description\": \"http-version\\/response\\/all\"\n              },\n              {\n                \"value\": \"http-version\\/response\\/major\",\n                \"description\": \"http-version\\/response\\/major\"\n              },\n              {\n                \"value\": \"http-version\\/response\\/minor\",\n                \"description\": \"http-version\\/response\\/minor\"\n              },\n              {\n                \"value\": \"http-version\\/response\\/protocol\",\n                \"description\": \"http-version\\/response\\/protocol\"\n              },\n              {\n                \"value\": \"ssl-cert\\/ssl-server-handshake\\/common-name\\/index\\/<index>\",\n                \"description\": \"ssl-cert\\/ssl-server-handshake\\/common-name\\/index\\/<index>\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-client-hello\\/alpn\",\n                \"description\": \"ssl-extension\\/ssl-client-hello\\/alpn\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-client-hello\\/npn\",\n                \"description\": \"ssl-extension\\/ssl-client-hello\\/npn\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-client-hello\\/server-name\",\n                \"description\": \"ssl-extension\\/ssl-client-hello\\/server-name\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-server-hello\\/alpn\",\n                \"description\": \"ssl-extension\\/ssl-server-hello\\/alpn\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-server-hello\\/npn\",\n                \"description\": \"ssl-extension\\/ssl-server-hello\\/npn\"\n              },\n              {\n                \"value\": \"ssl-extension\\/ssl-server-hello\\/server-name\",\n                \"description\": \"ssl-extension\\/ssl-server-hello\\/server-name\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/mss\\/internal\",\n                \"description\": \"tcp\\/request\\/mss\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/port\\/internal\",\n                \"description\": \"tcp\\/request\\/port\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/port\\/local\",\n                \"description\": \"tcp\\/request\\/port\\/local\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/route-domain\\/internal\",\n                \"description\": \"tcp\\/request\\/route-domain\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/rtt\\/internal\",\n                \"description\": \"tcp\\/request\\/rtt\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/vlan\\/internal\",\n                \"description\": \"tcp\\/request\\/vlan\\/internal\"\n              },\n              {\n                \"value\": \"tcp\\/request\\/vlan-id\\/internal\",\n                \"description\": \"tcp\\/request\\/vlan-id\\/internal\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Negate\",\n            \"description\": \"Negate:\",\n            \"displayName\": \"Negate\",\n            \"isRequired\": false,\n            \"provider\": \"no\",\n            \"choices\": [\n              {\n                \"value\": \"no\",\n                \"description\": \"no\"\n              },\n              {\n                \"value\": \"yes\",\n                \"description\": \"yes\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Condition\",\n            \"description\": \"Condition:\",\n            \"displayName\": \"Condition\",\n            \"isRequired\": false,\n            \"provider\": \"\",\n            \"choices\": [\n              {\n                \"value\": \"equals\",\n                \"description\": \"equals\"\n              },\n              {\n                \"value\": \"starts-with\",\n                \"description\": \"starts-with\"\n              },\n              {\n                \"value\": \"ends-with\",\n                \"description\": \"ends-with\"\n              },\n              {\n                \"value\": \"contains\",\n                \"description\": \"contains\"\n              },\n              {\n                \"value\": \"greater\",\n                \"description\": \"greater\"\n              },\n              {\n                \"value\": \"greater-or-equal\",\n                \"description\": \"greater-or-equal\"\n              },\n              {\n                \"value\": \"less\",\n                \"description\": \"less\"\n              },\n              {\n                \"value\": \"less-or-equal\",\n                \"description\": \"less-or-equal\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Value\",\n            \"description\": \"Value:\",\n            \"displayName\": \"Value\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"CaseSensitive\",\n            \"description\": \"Case Sensitive:\",\n            \"displayName\": \"CaseSensitive\",\n            \"isRequired\": false,\n            \"provider\": \"no\",\n            \"choices\": [\n              {\n                \"value\": \"no\",\n                \"description\": \"no\"\n              },\n              {\n                \"value\": \"yes\",\n                \"description\": \"yes\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Missing\",\n            \"description\": \"Missing:\",\n            \"displayName\": \"Missing\",\n            \"isRequired\": false,\n            \"provider\": \"no\",\n            \"choices\": [\n              {\n                \"value\": \"no\",\n                \"description\": \"no\"\n              },\n              {\n                \"value\": \"yes\",\n                \"description\": \"yes\"\n              }\n            ]\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Matching\"\n      },\n      {\n        \"name\": \"l7policy__rulesAction\",\n        \"columns\": [\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"displayName\": \"Group\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Target\",\n            \"description\": \"Target:\",\n            \"displayName\": \"Target\",\n            \"isRequired\": false,\n            \"provider\": \"\",\n            \"choices\": [\n              {\n                \"value\": \"asm\\/request\\/enable\\/policy\",\n                \"description\": \"asm\\/request\\/enable\\/policy\"\n              },\n              {\n                \"value\": \"asm\\/request\\/disable\",\n                \"description\": \"asm\\/request\\/disable\"\n              },\n              {\n                \"value\": \"cache\\/request\\/enable\\/pin\",\n                \"description\": \"cache\\/request\\/enable\\/pin\"\n              },\n              {\n                \"value\": \"cache\\/request\\/disable\",\n                \"description\": \"cache\\/request\\/disable\"\n              },\n              {\n                \"value\": \"cache\\/response\\/enable\\/pin\",\n                \"description\": \"cache\\/response\\/enable\\/pin\"\n              },\n              {\n                \"value\": \"cache\\/respones\\/disable\",\n                \"description\": \"cache\\/respones\\/disable\"\n              },\n              {\n                \"value\": \"compress\\/request\\/enable\",\n                \"description\": \"compress\\/request\\/enable\"\n              },\n              {\n                \"value\": \"compress\\/request\\/disable\",\n                \"description\": \"compress\\/request\\/disable\"\n              },\n              {\n                \"value\": \"compress\\/response\\/enable\",\n                \"description\": \"compress\\/response\\/enable\"\n              },\n              {\n                \"value\": \"compress\\/response\\/disable\",\n                \"description\": \"compress\\/response\\/disable\"\n              },\n              {\n                \"value\": \"decompress\\/request\\/enable\",\n                \"description\": \"decompress\\/request\\/enable\"\n              },\n              {\n                \"value\": \"decompress\\/request\\/disable\",\n                \"description\": \"decompress\\/request\\/disable\"\n              },\n              {\n                \"value\": \"decompress\\/response\\/enable\",\n                \"description\": \"decompress\\/response\\/enable\"\n              },\n              {\n                \"value\": \"decompress\\/response\\/disable\",\n                \"description\": \"decompress\\/response\\/disable\"\n              },\n              {\n                \"value\": \"forward\\/request\\/reset\",\n                \"description\": \"forward\\/request\\/reset\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/clone-pool\",\n                \"description\": \"forward\\/request\\/select\\/clone-pool\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/member\",\n                \"description\": \"forward\\/request\\/select\\/member\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/nexthop\",\n                \"description\": \"forward\\/request\\/select\\/nexthop\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/node\",\n                \"description\": \"forward\\/request\\/select\\/node\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/pool\",\n                \"description\": \"forward\\/request\\/select\\/pool\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/rateclass\",\n                \"description\": \"forward\\/request\\/select\\/rateclass\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/snat\",\n                \"description\": \"forward\\/request\\/select\\/snat\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/snatpool\",\n                \"description\": \"forward\\/request\\/select\\/snatpool\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/vlan\",\n                \"description\": \"forward\\/request\\/select\\/vlan\"\n              },\n              {\n                \"value\": \"forward\\/request\\/select\\/vlan-id\",\n                \"description\": \"forward\\/request\\/select\\/vlan-id\"\n              },\n              {\n                \"value\": \"http\\/request\\/enable\",\n                \"description\": \"http\\/request\\/enable\"\n              },\n              {\n                \"value\": \"http\\/request\\/disable\",\n                \"description\": \"http\\/request\\/disable\"\n              },\n              {\n                \"value\": \"http-cookie\\/request\\/insert\\/name,value\",\n                \"description\": \"http-cookie\\/request\\/insert\\/name,value\"\n              },\n              {\n                \"value\": \"http-cookie\\/request\\/remove\\/name\",\n                \"description\": \"http-cookie\\/request\\/remove\\/name\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/insert\\/name,value\",\n                \"description\": \"http-header\\/request\\/insert\\/name,value\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/remove\\/name\",\n                \"description\": \"http-header\\/request\\/remove\\/name\"\n              },\n              {\n                \"value\": \"http-header\\/request\\/replace\\/name,value\",\n                \"description\": \"http-header\\/request\\/replace\\/name,value\"\n              },\n              {\n                \"value\": \"http-header\\/response\\/insert\\/name,value\",\n                \"description\": \"http-header\\/response\\/insert\\/name,value\"\n              },\n              {\n                \"value\": \"http-header\\/response\\/remove\\/name\",\n                \"description\": \"http-header\\/response\\/remove\\/name\"\n              },\n              {\n                \"value\": \"http-header\\/response\\/replace\\/name,value\",\n                \"description\": \"http-header\\/response\\/replace\\/name,value\"\n              },\n              {\n                \"value\": \"http-host\\/request\\/replace\\/value\",\n                \"description\": \"http-host\\/request\\/replace\\/value\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/insert\\/value\",\n                \"description\": \"http-referer\\/request\\/insert\\/value\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/remove\",\n                \"description\": \"http-referer\\/request\\/remove\"\n              },\n              {\n                \"value\": \"http-referer\\/request\\/replace\\/value\",\n                \"description\": \"http-referer\\/request\\/replace\\/value\"\n              },\n              {\n                \"value\": \"http-reply\\/request\\/redirect\\/location\",\n                \"description\": \"http-reply\\/request\\/redirect\\/location\"\n              },\n              {\n                \"value\": \"http-reply\\/response\\/redirect\\/location\",\n                \"description\": \"http-reply\\/response\\/redirect\\/location\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/insert\\/name,domain,path,value\",\n                \"description\": \"http-set-cookie\\/response\\/insert\\/name,domain,path,value\"\n              },\n              {\n                \"value\": \"http-set-cookie\\/response\\/remove\\/name\",\n                \"description\": \"http-set-cookie\\/response\\/remove\\/name\"\n              },\n              {\n                \"value\": \"http-uri\\/response\\/replace\\/path,query-string,value\",\n                \"description\": \"http-uri\\/response\\/replace\\/path,query-string,value\"\n              },\n              {\n                \"value\": \"l7dos\\/request\\/enable\\/from-profile\",\n                \"description\": \"l7dos\\/request\\/enable\\/from-profile\"\n              },\n              {\n                \"value\": \"l7dos\\/request\\/disable\",\n                \"description\": \"l7dos\\/request\\/disable\"\n              },\n              {\n                \"value\": \"log\\/request\\/write\\/message\",\n                \"description\": \"log\\/request\\/write\\/message\"\n              },\n              {\n                \"value\": \"log\\/response\\/write\\/message\",\n                \"description\": \"log\\/response\\/write\\/message\"\n              },\n              {\n                \"value\": \"request-adapt\\/request\\/enable\\/internal-virtual-server\",\n                \"description\": \"request-adapt\\/request\\/enable\\/internal-virtual-server\"\n              },\n              {\n                \"value\": \"request-adapt\\/request\\/disable\",\n                \"description\": \"request-adapt\\/request\\/disable\"\n              },\n              {\n                \"value\": \"request-adapt\\/response\\/enable\\/internal-virtual-server\",\n                \"description\": \"request-adapt\\/response\\/enable\\/internal-virtual-server\"\n              },\n              {\n                \"value\": \"request-adapt\\/response\\/disable\",\n                \"description\": \"request-adapt\\/response\\/disable\"\n              },\n              {\n                \"value\": \"response-adapt\\/request\\/enable\\/internal-virtual-server\",\n                \"description\": \"response-adapt\\/request\\/enable\\/internal-virtual-server\"\n              },\n              {\n                \"value\": \"response-adapt\\/request\\/disable\",\n                \"description\": \"response-adapt\\/request\\/disable\"\n              },\n              {\n                \"value\": \"response-adapt\\/response\\/enable\\/internal-virtual-server\",\n                \"description\": \"response-adapt\\/response\\/enable\\/internal-virtual-server\"\n              },\n              {\n                \"value\": \"request-adapt\\/response\\/disable\",\n                \"description\": \"request-adapt\\/response\\/disable\"\n              },\n              {\n                \"value\": \"server-ssl\\/request\\/enable\",\n                \"description\": \"server-ssl\\/request\\/enable\"\n              },\n              {\n                \"value\": \"server-ssl\\/request\\/disable\",\n                \"description\": \"server-ssl\\/request\\/disable\"\n              },\n              {\n                \"value\": \"tcl\\/request\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/request\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcl\\/response\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/response\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcl\\/ssl-client-hello\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/ssl-client-hello\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcl\\/ssl-server-handshake\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/ssl-server-handshake\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcl\\/ssl-server-hello\\/set-variable\\/name,expression\",\n                \"description\": \"tcl\\/ssl-server-hello\\/set-variable\\/name,expression\"\n              },\n              {\n                \"value\": \"tcp-nagle\\/request\\/enable\",\n                \"description\": \"tcp-nagle\\/request\\/enable\"\n              },\n              {\n                \"value\": \"tcp-nagle\\/request\\/disable\",\n                \"description\": \"tcp-nagle\\/request\\/disable\"\n              }\n            ]\n          },\n          {\n            \"name\": \"Parameter\",\n            \"description\": \"Parameter:\",\n            \"displayName\": \"Parameter\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Action\"\n      },\n      {\n        \"name\": \"feature__easyL4FirewallBlacklist\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"displayName\": \"CIDRRange\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"feature__easyL4FirewallSourceList\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"displayName\": \"CIDRRange\",\n            \"isRequired\": false,\n            \"provider\": \"0.0.0.0\\/0\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"monitor__Monitors\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"displayName\": \"Index\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"displayName\": \"Name\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\\/Common\\/udp\"\n          },\n          {\n            \"name\": \"Type\",\n            \"description\": \"Type:\",\n            \"displayName\": \"Type\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Options\",\n            \"description\": \"Options:\",\n            \"displayName\": \"Options\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Monitor: Monitor Table\"\n      }\n    ]\n  }\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "f5-fasthttp-lb Template",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"templateName\",",
									"            \"value\":\"f5-fasthttp-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/provider/templates/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"templateName\": \"f5-fasthttp-lb\",\n  \"parentReference\": {\n    \"link\":\"/mgmt/cm/cloud/templates/iapp/{{iwf_appsvcs_name}}\"\n  },\n  \"properties\": [\n  {\n        \"id\": \"cloudConnectorReference\",\n        \"displayName\": \"Cloud Connector\",\n        \"isRequired\": true\n    }\n  ],\n  \"sectionOrderOfPresentation\": [\n\t  \"iApp Options\",\n\t  \"Virtual Server Listener & Pool Configuration\",\n\t  \"Pool Monitor(s) Configuration\",\n\t  \"Virtual Server Configuration\",\n\t  \"L7 Traffic Policy\",\n\t  \"L4-7 Helpers\",\n\t  \"Custom Extensions Section\"\n  ],\n  \"overrides\": {\n    \"vars\": [\n      {\n        \"name\": \"extensions__Field1\",\n        \"description\": \"Extensions: Field 1\",\n        \"displayName\": \"Field1\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field2\",\n        \"description\": \"Extensions: Field 2\",\n        \"displayName\": \"Field2\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field3\",\n        \"description\": \"Extensions: Field 3\",\n        \"displayName\": \"Field3\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"feature__easyL4Firewall\",\n        \"description\": \"Security: Firewall: Configure L4 Firewall Policy\",\n        \"displayName\": \"easyL4Firewall\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"base\",\n            \"description\": \"base\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_block\",\n            \"description\": \"base+ip_blacklist_block\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_log\",\n            \"description\": \"base+ip_blacklist_log\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__insertXForwardedFor\",\n        \"description\": \"HTTP: Insert X-Forwarded-For Header\",\n        \"displayName\": \"insertXForwardedFor\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__redirectToHTTPS\",\n        \"description\": \"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\",\n        \"displayName\": \"redirectToHTTPS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__securityEnableHSTS\",\n        \"description\": \"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\",\n        \"displayName\": \"securityEnableHSTS\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\"\n      },\n      {\n        \"name\": \"feature__sslEasyCipher\",\n        \"description\": \"TLS\\/SSL: Easy Cipher String (overrides VS section setting)\",\n        \"displayName\": \"sslEasyCipher\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"compatible\",\n            \"description\": \"compatible\"\n          },\n          {\n            \"value\": \"medium\",\n            \"description\": \"medium\"\n          },\n          {\n            \"value\": \"high\",\n            \"description\": \"high\"\n          },\n          {\n            \"value\": \"tls_1.2\",\n            \"description\": \"tls_1.2\"\n          },\n          {\n            \"value\": \"tls_1.1+1.2\",\n            \"description\": \"tls_1.1+1.2\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsHTTP\",\n        \"description\": \"HTTP: Stats Reporting\",\n        \"displayName\": \"statsHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsTLS\",\n        \"description\": \"TLS\\/SSL: Stats Reporting\",\n        \"displayName\": \"statsTLS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__apmDeployMode\",\n        \"description\": \"iApp: APM: Deployment Mode\",\n        \"displayName\": \"apmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__appStats\",\n        \"description\": \"iApp: Statistics Handler Creation\",\n        \"displayName\": \"appStats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__asmDeployMode\",\n        \"description\": \"iApp: ASM: Deployment Mode\",\n        \"displayName\": \"asmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__logLevel\",\n        \"description\": \"iApp: Log Level\",\n        \"displayName\": \"logLevel\",\n        \"isRequired\": false,\n        \"provider\": \"7\"\n      },\n      {\n        \"name\": \"iapp__mode\",\n        \"description\": \"iApp: Mode\",\n        \"displayName\": \"mode\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__routeDomain\",\n        \"description\": \"iApp: Route Domain\",\n        \"displayName\": \"routeDomain\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__strictUpdates\",\n        \"description\": \"iApp: Strict Updates\",\n        \"displayName\": \"strictUpdates\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"l7policy__defaultASM\",\n        \"description\": \"L7 Policy: Default ASM Policy\",\n        \"displayName\": \"defaultASM\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__defaultL7DOS\",\n        \"description\": \"L7 Policy: Default L7 DoS Policy\",\n        \"displayName\": \"defaultL7DOS\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__strategy\",\n        \"description\": \"L7 Policy: Match Strategy\",\n        \"displayName\": \"strategy\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/first-match\"\n      },\n      {\n        \"name\": \"pool__DefaultPoolIndex\",\n        \"description\": \"Virtual Server: Default Pool Index\",\n        \"displayName\": \"DefaultPoolIndex\",\n        \"isRequired\": false,\n        \"provider\": \"0\",\n        \"validator\": \"NonNegativeNumber\"\n      },\n      {\n        \"name\": \"pool__MemberDefaultPort\",\n        \"description\": \"Pool: Member Default Port\",\n        \"displayName\": \"MemberDefaultPort\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"pool__addr\",\n        \"description\": \"Virtual Server: Address\",\n        \"displayName\": \"addr\",\n        \"isRequired\": true,\n        \"defaultValue\": \"\",\n        \"providerType\": \"NODE\",\n        \"serverTier\": \"Default\",\n        \"validator\": \"IpAddress\"\n      },\n      {\n        \"name\": \"pool__mask\",\n        \"description\": \"Virtual Server: Mask\",\n        \"displayName\": \"mask\",\n        \"isRequired\": true,\n        \"provider\": \"255.255.255.255\",\n        \"validator\": \"IpAddress\"\n      },\n      {\n        \"name\": \"pool__port\",\n        \"description\": \"Virtual Server: Port\",\n        \"displayName\": \"port\",\n        \"isRequired\": true,\n        \"defaultValue\": \"80\",\n        \"providerType\": \"PORT\",\n        \"serverTier\": \"Default\",\n        \"validator\": \"PortNumber\"\n      },\n      {\n        \"name\": \"vs__AdvOptions\",\n        \"description\": \"Virtual Server: Advanced Options\",\n        \"displayName\": \"AdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvPolicies\",\n        \"description\": \"Virtual Server: Advanced Policies\",\n        \"displayName\": \"AdvPolicies\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvProfiles\",\n        \"description\": \"Virtual Server: Advanced Profiles\",\n        \"displayName\": \"AdvProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ConnectionLimit\",\n        \"description\": \"Virtual Server: Virtual Server Connection Limit (0=unlimited)\",\n        \"displayName\": \"ConnectionLimit\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"vs__Description\",\n        \"description\": \"Virtual Server: Description\",\n        \"displayName\": \"Description\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__IpProtocol\",\n        \"description\": \"Virtual Server: IP Protocol\",\n        \"displayName\": \"IpProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"tcp\"\n      },\n      {\n        \"name\": \"vs__Irules\",\n        \"description\": \"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\",\n        \"displayName\": \"Irules\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__Name\",\n        \"description\": \"Virtual Server: Name\",\n        \"displayName\": \"Name\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__OptionConnectionMirroring\",\n        \"description\": \"Virtual Server: Connection Mirroring\",\n        \"displayName\": \"OptionConnectionMirroring\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__OptionSourcePort\",\n        \"description\": \"Virtual Server: Source Port Behavior\",\n        \"displayName\": \"OptionSourcePort\",\n        \"isRequired\": false,\n        \"provider\": \"preserve\",\n        \"choices\": [\n          {\n            \"value\": \"preserve\",\n            \"description\": \"preserve\"\n          },\n          {\n            \"value\": \"preserve-strict\",\n            \"description\": \"preserve-strict\"\n          },\n          {\n            \"value\": \"change\",\n            \"description\": \"change\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__ProfileAccess\",\n        \"description\": \"Virtual Server: Access Profile\",\n        \"displayName\": \"ProfileAccess\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileAnalytics\",\n        \"description\": \"Virtual Server: Analytics Profile\",\n        \"displayName\": \"ProfileAnalytics\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientProtocol\",\n        \"description\": \"Virtual Server: Client-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileClientProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/fastL4\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSL\",\n        \"description\": \"Virtual Server: Client SSL Profile\",\n        \"displayName\": \"ProfileClientSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLAdvOptions\",\n        \"description\": \"Virtual Server: Client SSL Advanced Options\",\n        \"displayName\": \"ProfileClientSSLAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCert\",\n        \"description\": \"Virtual Server: Client SSL Certificate\",\n        \"displayName\": \"ProfileClientSSLCert\",\n        \"isRequired\": false,\n        \"provider\":\"\",\n        \"serverTier\": \"Default\",\n        \"providerType\": \"SSL_CERT\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLChain\",\n        \"description\": \"Virtual Server: Client SSL Certificate Chain\",\n        \"displayName\": \"ProfileClientSSLChain\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCipherString\",\n        \"description\": \"Virtual Server: Client SSL Cipher String\",\n        \"displayName\": \"ProfileClientSSLCipherString\",\n        \"isRequired\": false,\n        \"provider\": \"DEFAULT\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLKey\",\n        \"description\": \"Virtual Server: Client SSL Key\",\n        \"displayName\": \"ProfileClientSSLKey\",\n        \"isRequired\": false,\n        \"provider\":\"\",        \n        \"serverTier\": \"Default\",\n        \"providerType\": \"SSL_KEY\"\n      },\n      {\n        \"name\": \"vs__ProfileCompression\",\n        \"description\": \"Virtual Server: Compression Profile\",\n        \"displayName\": \"ProfileCompression\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileConnectivity\",\n        \"description\": \"Virtual Server: Connectivity Profile\",\n        \"displayName\": \"ProfileConnectivity\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileDefaultPersist\",\n        \"description\": \"Virtual Server: Default Persistence Profile\",\n        \"displayName\": \"ProfileDefaultPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileFallbackPersist\",\n        \"description\": \"Virtual Server: Fallback Persistence Profile\",\n        \"displayName\": \"ProfileFallbackPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileHTTP\",\n        \"description\": \"Virtual Server: HTTP Profile\",\n        \"displayName\": \"ProfileHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/http\"\n      },\n      {\n        \"name\": \"vs__ProfileOneConnect\",\n        \"description\": \"Virtual Server: OneConnect Profile\",\n        \"displayName\": \"ProfileOneConnect\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfilePerRequest\",\n        \"description\": \"Virtual Server: Per-Request Profile\",\n        \"displayName\": \"ProfilePerRequest\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileRequestLogging\",\n        \"description\": \"Virtual Server: Request Logging Profile\",\n        \"displayName\": \"ProfileRequestLogging\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityDoS\",\n        \"description\": \"Virtual Server: Security: DoS Profile\",\n        \"displayName\": \"ProfileSecurityDoS\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityIPBlacklist\",\n        \"description\": \"Virtual Server: IP Blacklist Profile\",\n        \"displayName\": \"ProfileSecurityIPBlacklist\",\n        \"isRequired\": false,\n        \"provider\": \"none\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityLogProfiles\",\n        \"description\": \"Virtual Server: Security Logging Profiles\",\n        \"displayName\": \"ProfileSecurityLogProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileServerProtocol\",\n        \"description\": \"Virtual Server: Server-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileServerProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/fastL4\"\n      },\n      {\n        \"name\": \"vs__ProfileServerSSL\",\n        \"description\": \"Virtual Server: Server SSL Profile\",\n        \"displayName\": \"ProfileServerSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__RouteAdv\",\n        \"description\": \"Virtual Server: Route Advertisement\",\n        \"displayName\": \"RouteAdv\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          },\n          {\n            \"value\": \"all_vs\",\n            \"description\": \"all_vs\"\n          },\n          {\n            \"value\": \"any_vs\",\n            \"description\": \"any_vs\"\n          },\n          {\n            \"value\": \"always\",\n            \"description\": \"always\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__SNATConfig\",\n        \"description\": \"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\",\n        \"displayName\": \"SNATConfig\",\n        \"isRequired\": false,\n        \"provider\": \"automap\"\n      },\n      {\n        \"name\": \"vs__SourceAddress\",\n        \"description\": \"Virtual Server: Source Address\",\n        \"displayName\": \"SourceAddress\",\n        \"isRequired\": false,\n        \"provider\": \"0.0.0.0\\/0\"\n      },\n      {\n        \"name\": \"vs__VirtualAddrAdvOptions\",\n        \"description\": \"Virtual Address: Advanced Options\",\n        \"displayName\": \"VirtualAddrAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"app_stats\",\n        \"description\": \"Enable health and performance monitoring.\",\n        \"displayName\": \"app_stats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      }\n    ],\n    \"tables\": [\n      {\n        \"name\": \"feature__easyL4FirewallBlacklist\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"feature__easyL4FirewallSourceList\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"0.0.0.0\\/0\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"l7policy__rulesAction\",\n        \"columns\": [\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Parameter\",\n            \"description\": \"Parameter:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Target\",\n            \"description\": \"Target:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Action\"\n      },\n      {\n        \"name\": \"l7policy__rulesMatch\",\n        \"columns\": [\n          {\n            \"name\": \"CaseSensitive\",\n            \"description\": \"Case Sensitive:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Condition\",\n            \"description\": \"Condition:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Missing\",\n            \"description\": \"Missing:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Negate\",\n            \"description\": \"Negate:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Operand\",\n            \"description\": \"Operand:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Value\",\n            \"description\": \"Value:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Matching\"\n      },\n      {\n        \"name\": \"monitor__Monitors\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"provider\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Options\",\n            \"description\": \"Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Type\",\n            \"description\": \"Type:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Monitor: Monitor Table\"\n      },\n      {\n        \"name\": \"pool__Members\",\n        \"serverTier\": \"Default\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"ConnectionLimit\",\n            \"description\": \"Connection Limit:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"IPAddress\",\n            \"description\": \"IP\\/Node Name:\",\n            \"isRequired\": false,\n            \"providerType\": \"NODE\",\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Pool Idx:\",\n            \"isRequired\": false,\n            \"provider\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Port\",\n            \"description\": \"Port:\",\n            \"isRequired\": false,\n            \"providerType\": \"PORT\",\n            \"provider\": \"80\"\n          },\n          {\n            \"name\": \"PriorityGroup\",\n            \"description\": \"Priority Group:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Ratio\",\n            \"description\": \"Ratio:\",\n            \"isRequired\": false,\n            \"provider\": \"1\"\n          },\n          {\n            \"name\": \"State\",\n            \"description\": \"State:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"enabled\"\n          }\n        ],\n        \"description\": \"Pool: Members\"\n      },\n      {\n        \"name\": \"pool__Pools\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Description\",\n            \"description\": \"Description:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"provider\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"LbMethod\",\n            \"description\": \"LB Method:\",\n            \"isRequired\": false,\n            \"provider\": \"round-robin\"\n          },\n          {\n            \"name\": \"Monitor\",\n            \"description\": \"Monitor(s):\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Pool: Pool Table\"\n      },\n      {\n        \"name\": \"vs__BundledItems\",\n        \"columns\": [\n          {\n            \"name\": \"Resource\",\n            \"description\": \"Resource:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Bundled Items\"\n      },\n      {\n        \"name\": \"vs__Listeners\",\n        \"columns\": [\n          {\n            \"name\": \"Destination\",\n            \"description\": \"Destination\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Listener\",\n            \"description\": \"Listener:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Additional Listeners\"\n      }\n    ]\n  }\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "f5-http-url-routing-lb Template",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"templateName\",",
									"            \"value\":\"f5-http-url-routing-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/provider/templates/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"templateName\": \"f5-http-url-routing-lb\",\n  \"parentReference\": {\n    \"link\":\"/mgmt/cm/cloud/templates/iapp/{{iwf_appsvcs_name}}\"\n  },\n  \"properties\": [\n  {\n        \"id\": \"cloudConnectorReference\",\n        \"displayName\": \"Cloud Connector\",\n        \"isRequired\": true\n    }\n  ],\n  \"sectionOrderOfPresentation\": [\n\t  \"iApp Options\",\n\t  \"Virtual Server Listener & Pool Configuration\",\n\t  \"Pool Monitor(s) Configuration\",\n\t  \"Virtual Server Configuration\",\n\t  \"L7 Traffic Policy\",\n\t  \"L4-7 Helpers\",\n\t  \"Custom Extensions Section\"\n  ],\n  \"overrides\": {\n    \"vars\": [\n      {\n        \"name\": \"extensions__Field1\",\n        \"description\": \"Extensions: Field 1\",\n        \"displayName\": \"Field1\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field2\",\n        \"description\": \"Extensions: Field 2\",\n        \"displayName\": \"Field2\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field3\",\n        \"description\": \"Extensions: Field 3\",\n        \"displayName\": \"Field3\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"feature__easyL4Firewall\",\n        \"description\": \"Security: Firewall: Configure L4 Firewall Policy\",\n        \"displayName\": \"easyL4Firewall\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"base\",\n            \"description\": \"base\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_block\",\n            \"description\": \"base+ip_blacklist_block\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_log\",\n            \"description\": \"base+ip_blacklist_log\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__insertXForwardedFor\",\n        \"description\": \"HTTP: Insert X-Forwarded-For Header\",\n        \"displayName\": \"insertXForwardedFor\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__redirectToHTTPS\",\n        \"description\": \"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\",\n        \"displayName\": \"redirectToHTTPS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__securityEnableHSTS\",\n        \"description\": \"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\",\n        \"displayName\": \"securityEnableHSTS\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\"\n      },\n      {\n        \"name\": \"feature__sslEasyCipher\",\n        \"description\": \"TLS\\/SSL: Easy Cipher String (overrides VS section setting)\",\n        \"displayName\": \"sslEasyCipher\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"compatible\",\n            \"description\": \"compatible\"\n          },\n          {\n            \"value\": \"medium\",\n            \"description\": \"medium\"\n          },\n          {\n            \"value\": \"high\",\n            \"description\": \"high\"\n          },\n          {\n            \"value\": \"tls_1.2\",\n            \"description\": \"tls_1.2\"\n          },\n          {\n            \"value\": \"tls_1.1+1.2\",\n            \"description\": \"tls_1.1+1.2\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsHTTP\",\n        \"description\": \"HTTP: Stats Reporting\",\n        \"displayName\": \"statsHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsTLS\",\n        \"description\": \"TLS\\/SSL: Stats Reporting\",\n        \"displayName\": \"statsTLS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__apmDeployMode\",\n        \"description\": \"iApp: APM: Deployment Mode\",\n        \"displayName\": \"apmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__appStats\",\n        \"description\": \"iApp: Statistics Handler Creation\",\n        \"displayName\": \"appStats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__asmDeployMode\",\n        \"description\": \"iApp: ASM: Deployment Mode\",\n        \"displayName\": \"asmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__logLevel\",\n        \"description\": \"iApp: Log Level\",\n        \"displayName\": \"logLevel\",\n        \"isRequired\": false,\n        \"provider\": \"7\"\n      },\n      {\n        \"name\": \"iapp__mode\",\n        \"description\": \"iApp: Mode\",\n        \"displayName\": \"mode\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__routeDomain\",\n        \"description\": \"iApp: Route Domain\",\n        \"displayName\": \"routeDomain\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__strictUpdates\",\n        \"description\": \"iApp: Strict Updates\",\n        \"displayName\": \"strictUpdates\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"l7policy__defaultASM\",\n        \"description\": \"L7 Policy: Default ASM Policy\",\n        \"displayName\": \"defaultASM\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__defaultL7DOS\",\n        \"description\": \"L7 Policy: Default L7 DoS Policy\",\n        \"displayName\": \"defaultL7DOS\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__strategy\",\n        \"description\": \"L7 Policy: Match Strategy\",\n        \"displayName\": \"strategy\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/first-match\"\n      },\n      {\n        \"name\": \"pool__DefaultPoolIndex\",\n        \"description\": \"Virtual Server: Default Pool Index\",\n        \"displayName\": \"DefaultPoolIndex\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"pool__MemberDefaultPort\",\n        \"description\": \"Pool: Member Default Port\",\n        \"displayName\": \"MemberDefaultPort\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"pool__addr\",\n        \"description\": \"Virtual Server: Address\",\n        \"displayName\": \"addr\",\n        \"isRequired\": true,\n        \"defaultValue\": \"\",\n        \"providerType\": \"NODE\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"pool__mask\",\n        \"description\": \"Virtual Server: Mask\",\n        \"displayName\": \"mask\",\n        \"isRequired\": true,\n        \"provider\": \"255.255.255.255\"\n      },\n      {\n        \"name\": \"pool__port\",\n        \"description\": \"Virtual Server: Port\",\n        \"displayName\": \"port\",\n        \"isRequired\": true,\n        \"defaultValue\": \"80\",\n        \"providerType\": \"PORT\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"vs__AdvOptions\",\n        \"description\": \"Virtual Server: Advanced Options\",\n        \"displayName\": \"AdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvPolicies\",\n        \"description\": \"Virtual Server: Advanced Policies\",\n        \"displayName\": \"AdvPolicies\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvProfiles\",\n        \"description\": \"Virtual Server: Advanced Profiles\",\n        \"displayName\": \"AdvProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ConnectionLimit\",\n        \"description\": \"Virtual Server: Virtual Server Connection Limit (0=unlimited)\",\n        \"displayName\": \"ConnectionLimit\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"vs__Description\",\n        \"description\": \"Virtual Server: Description\",\n        \"displayName\": \"Description\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__IpProtocol\",\n        \"description\": \"Virtual Server: IP Protocol\",\n        \"displayName\": \"IpProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"tcp\"\n      },\n      {\n        \"name\": \"vs__Irules\",\n        \"description\": \"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\",\n        \"displayName\": \"Irules\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__Name\",\n        \"description\": \"Virtual Server: Name\",\n        \"displayName\": \"Name\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__OptionConnectionMirroring\",\n        \"description\": \"Virtual Server: Connection Mirroring\",\n        \"displayName\": \"OptionConnectionMirroring\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__OptionSourcePort\",\n        \"description\": \"Virtual Server: Source Port Behavior\",\n        \"displayName\": \"OptionSourcePort\",\n        \"isRequired\": false,\n        \"provider\": \"preserve\",\n        \"choices\": [\n          {\n            \"value\": \"preserve\",\n            \"description\": \"preserve\"\n          },\n          {\n            \"value\": \"preserve-strict\",\n            \"description\": \"preserve-strict\"\n          },\n          {\n            \"value\": \"change\",\n            \"description\": \"change\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__ProfileAccess\",\n        \"description\": \"Virtual Server: Access Profile\",\n        \"displayName\": \"ProfileAccess\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileAnalytics\",\n        \"description\": \"Virtual Server: Analytics Profile\",\n        \"displayName\": \"ProfileAnalytics\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientProtocol\",\n        \"description\": \"Virtual Server: Client-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileClientProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/tcp-wan-optimized\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSL\",\n        \"description\": \"Virtual Server: Client SSL Profile\",\n        \"displayName\": \"ProfileClientSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLAdvOptions\",\n        \"description\": \"Virtual Server: Client SSL Advanced Options\",\n        \"displayName\": \"ProfileClientSSLAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCert\",\n        \"description\": \"Virtual Server: Client SSL Certificate\",\n        \"displayName\": \"ProfileClientSSLCert\",\n        \"isRequired\": false,\n        \"provider\": \"\",\n        \"providerType\": \"SSL_CERT\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLChain\",\n        \"description\": \"Virtual Server: Client SSL Certificate Chain\",\n        \"displayName\": \"ProfileClientSSLChain\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCipherString\",\n        \"description\": \"Virtual Server: Client SSL Cipher String\",\n        \"displayName\": \"ProfileClientSSLCipherString\",\n        \"isRequired\": false,\n        \"provider\": \"DEFAULT\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLKey\",\n        \"description\": \"Virtual Server: Client SSL Key\",\n        \"displayName\": \"ProfileClientSSLKey\",\n        \"isRequired\": false,\n        \"provider\": \"\",\n        \"providerType\": \"SSL_KEY\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"vs__ProfileCompression\",\n        \"description\": \"Virtual Server: Compression Profile\",\n        \"displayName\": \"ProfileCompression\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileConnectivity\",\n        \"description\": \"Virtual Server: Connectivity Profile\",\n        \"displayName\": \"ProfileConnectivity\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileDefaultPersist\",\n        \"description\": \"Virtual Server: Default Persistence Profile\",\n        \"displayName\": \"ProfileDefaultPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileFallbackPersist\",\n        \"description\": \"Virtual Server: Fallback Persistence Profile\",\n        \"displayName\": \"ProfileFallbackPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileHTTP\",\n        \"description\": \"Virtual Server: HTTP Profile\",\n        \"displayName\": \"ProfileHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/http\"\n      },\n      {\n        \"name\": \"vs__ProfileOneConnect\",\n        \"description\": \"Virtual Server: OneConnect Profile\",\n        \"displayName\": \"ProfileOneConnect\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfilePerRequest\",\n        \"description\": \"Virtual Server: Per-Request Profile\",\n        \"displayName\": \"ProfilePerRequest\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileRequestLogging\",\n        \"description\": \"Virtual Server: Request Logging Profile\",\n        \"displayName\": \"ProfileRequestLogging\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityDoS\",\n        \"description\": \"Virtual Server: Security: DoS Profile\",\n        \"displayName\": \"ProfileSecurityDoS\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityIPBlacklist\",\n        \"description\": \"Virtual Server: IP Blacklist Profile\",\n        \"displayName\": \"ProfileSecurityIPBlacklist\",\n        \"isRequired\": false,\n        \"provider\": \"none\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityLogProfiles\",\n        \"description\": \"Virtual Server: Security Logging Profiles\",\n        \"displayName\": \"ProfileSecurityLogProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileServerProtocol\",\n        \"description\": \"Virtual Server: Server-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileServerProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"\\/Common\\/tcp-wan-optimized\"\n      },\n      {\n        \"name\": \"vs__ProfileServerSSL\",\n        \"description\": \"Virtual Server: Server SSL Profile\",\n        \"displayName\": \"ProfileServerSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__RouteAdv\",\n        \"description\": \"Virtual Server: Route Advertisement\",\n        \"displayName\": \"RouteAdv\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          },\n          {\n            \"value\": \"all_vs\",\n            \"description\": \"all_vs\"\n          },\n          {\n            \"value\": \"any_vs\",\n            \"description\": \"any_vs\"\n          },\n          {\n            \"value\": \"always\",\n            \"description\": \"always\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__SNATConfig\",\n        \"description\": \"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\",\n        \"displayName\": \"SNATConfig\",\n        \"isRequired\": false,\n        \"provider\": \"automap\"\n      },\n      {\n        \"name\": \"vs__SourceAddress\",\n        \"description\": \"Virtual Server: Source Address\",\n        \"displayName\": \"SourceAddress\",\n        \"isRequired\": false,\n        \"provider\": \"0.0.0.0\\/0\"\n      },\n      {\n        \"name\": \"vs__VirtualAddrAdvOptions\",\n        \"description\": \"Virtual Address: Advanced Options\",\n        \"displayName\": \"VirtualAddrAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"app_stats\",\n        \"description\": \"Enable health and performance monitoring.\",\n        \"displayName\": \"app_stats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      }\n    ],\n    \"tables\": [\n      {\n        \"name\": \"feature__easyL4FirewallBlacklist\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"feature__easyL4FirewallSourceList\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"0.0.0.0\\/0\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"l7policy__rulesAction\",\n        \"columns\": [\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Parameter\",\n            \"description\": \"Parameter:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Target\",\n            \"description\": \"Target:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Action\"\n      },\n      {\n        \"name\": \"l7policy__rulesMatch\",\n        \"columns\": [\n          {\n            \"name\": \"CaseSensitive\",\n            \"description\": \"Case Sensitive:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Condition\",\n            \"description\": \"Condition:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Missing\",\n            \"description\": \"Missing:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Negate\",\n            \"description\": \"Negate:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Operand\",\n            \"description\": \"Operand:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Value\",\n            \"description\": \"Value:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Matching\"\n      },\n      {\n        \"name\": \"pool__Members\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"ConnectionLimit\",\n            \"description\": \"Connection Limit:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"IPAddress\",\n            \"description\": \"IP\\/Node Name:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\",\n            \"providerType\": \"NODE\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Pool Idx:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Port\",\n            \"description\": \"Port:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"80\",\n            \"providerType\": \"PORT\"\n          },\n          {\n            \"name\": \"PriorityGroup\",\n            \"description\": \"Priority Group:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Ratio\",\n            \"description\": \"Ratio:\",\n            \"isRequired\": false,\n            \"provider\": \"1\"\n          },\n          {\n            \"name\": \"State\",\n            \"description\": \"State:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"enabled\"\n          }\n        ],\n        \"description\": \"Pool: Members\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"pool__Pools\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Description\",\n            \"description\": \"Description:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"LbMethod\",\n            \"description\": \"LB Method:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"round-robin\"\n          },\n          {\n            \"name\": \"Monitor\",\n            \"description\": \"Monitor(s):\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Pool: Pool Table\"\n      },\n      {\n        \"name\": \"vs__BundledItems\",\n        \"columns\": [\n          {\n            \"name\": \"Resource\",\n            \"description\": \"Resource:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Bundled Items\"\n      },\n      {\n        \"name\": \"vs__Listeners\",\n        \"columns\": [\n          {\n            \"name\": \"Destination\",\n            \"description\": \"Destination\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Listener\",\n            \"description\": \"Listener:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Additional Listeners\"\n      },\n      {\n        \"name\": \"monitor__Monitors\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Options\",\n            \"description\": \"Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Type\",\n            \"description\": \"Type:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Monitor: Monitor Table\"\n      }\n    ]\n  }\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "f5-https-waf-lb Template",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"templateName\",",
									"            \"value\":\"f5-https-waf-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/provider/templates/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"templateName\": \"f5-https-waf-lb\",\n  \"parentReference\": {\n    \"link\":\"/mgmt/cm/cloud/templates/iapp/{{iwf_appsvcs_name}}\"\n  },\n  \"properties\": [\n  {\n        \"id\": \"cloudConnectorReference\",\n        \"displayName\": \"Cloud Connector\",\n        \"isRequired\": true\n    }\n  ],\n  \"sectionOrderOfPresentation\": [\n\t  \"iApp Options\",\n\t  \"Virtual Server Listener & Pool Configuration\",\n\t  \"Pool Monitor(s) Configuration\",\n\t  \"Virtual Server Configuration\",\n\t  \"L7 Traffic Policy\",\n\t  \"L4-7 Helpers\",\n\t  \"Custom Extensions Section\"\n  ],\n  \"overrides\": {\n    \"vars\": [\n      {\n        \"name\": \"extensions__Field1\",\n        \"description\": \"Extensions: Field 1\",\n        \"displayName\": \"Field1\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field2\",\n        \"description\": \"Extensions: Field 2\",\n        \"displayName\": \"Field2\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"extensions__Field3\",\n        \"description\": \"Extensions: Field 3\",\n        \"displayName\": \"Field3\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"feature__easyL4Firewall\",\n        \"description\": \"Security: Firewall: Configure L4 Firewall Policy\",\n        \"displayName\": \"easyL4Firewall\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"base\",\n            \"description\": \"base\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_block\",\n            \"description\": \"base+ip_blacklist_block\"\n          },\n          {\n            \"value\": \"base+ip_blacklist_log\",\n            \"description\": \"base+ip_blacklist_log\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__insertXForwardedFor\",\n        \"description\": \"HTTP: Insert X-Forwarded-For Header\",\n        \"displayName\": \"insertXForwardedFor\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__redirectToHTTPS\",\n        \"description\": \"HTTP: Security: Create HTTP(80)->HTTPS(443) Redirect\",\n        \"displayName\": \"redirectToHTTPS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__securityEnableHSTS\",\n        \"description\": \"HTTP: Security: Enable HTTP Strict Transport Security (only valid if ClientSSL is configured)\",\n        \"displayName\": \"securityEnableHSTS\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\"\n      },\n      {\n        \"name\": \"feature__sslEasyCipher\",\n        \"description\": \"TLS/SSL: Easy Cipher String (overrides VS section setting)\",\n        \"displayName\": \"sslEasyCipher\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"compatible\",\n            \"description\": \"compatible\"\n          },\n          {\n            \"value\": \"medium\",\n            \"description\": \"medium\"\n          },\n          {\n            \"value\": \"high\",\n            \"description\": \"high\"\n          },\n          {\n            \"value\": \"tls_1.2\",\n            \"description\": \"tls_1.2\"\n          },\n          {\n            \"value\": \"tls_1.1+1.2\",\n            \"description\": \"tls_1.1+1.2\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsHTTP\",\n        \"description\": \"HTTP: Stats Reporting\",\n        \"displayName\": \"statsHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"feature__statsTLS\",\n        \"description\": \"TLS/SSL: Stats Reporting\",\n        \"displayName\": \"statsTLS\",\n        \"isRequired\": false,\n        \"provider\": \"auto\",\n        \"choices\": [\n          {\n            \"value\": \"auto\",\n            \"description\": \"auto\"\n          },\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__apmDeployMode\",\n        \"description\": \"iApp: APM: Deployment Mode\",\n        \"displayName\": \"apmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__appStats\",\n        \"description\": \"iApp: Statistics Handler Creation\",\n        \"displayName\": \"appStats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__asmDeployMode\",\n        \"description\": \"iApp: ASM: Deployment Mode\",\n        \"displayName\": \"asmDeployMode\",\n        \"isRequired\": false,\n        \"provider\": \"preserve-bypass\",\n        \"choices\": [\n          {\n            \"value\": \"preserve-bypass\",\n            \"description\": \"preserve-bypass\"\n          },\n          {\n            \"value\": \"preserve-block\",\n            \"description\": \"preserve-block\"\n          },\n          {\n            \"value\": \"redeploy-bypass\",\n            \"description\": \"redeploy-bypass\"\n          },\n          {\n            \"value\": \"redeploy-block\",\n            \"description\": \"redeploy-block\"\n          }\n        ]\n      },\n      {\n        \"name\": \"iapp__logLevel\",\n        \"description\": \"iApp: Log Level\",\n        \"displayName\": \"logLevel\",\n        \"isRequired\": false,\n        \"provider\": \"7\"\n      },\n      {\n        \"name\": \"iapp__mode\",\n        \"description\": \"iApp: Mode\",\n        \"displayName\": \"mode\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__routeDomain\",\n        \"description\": \"iApp: Route Domain\",\n        \"displayName\": \"routeDomain\",\n        \"isRequired\": false,\n        \"provider\": \"auto\"\n      },\n      {\n        \"name\": \"iapp__strictUpdates\",\n        \"description\": \"iApp: Strict Updates\",\n        \"displayName\": \"strictUpdates\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"l7policy__defaultASM\",\n        \"description\": \"L7 Policy: Default ASM Policy\",\n        \"displayName\": \"defaultASM\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__defaultL7DOS\",\n        \"description\": \"L7 Policy: Default L7 DoS Policy\",\n        \"displayName\": \"defaultL7DOS\",\n        \"isRequired\": false,\n        \"provider\": \"bypass\"\n      },\n      {\n        \"name\": \"l7policy__strategy\",\n        \"description\": \"L7 Policy: Match Strategy\",\n        \"displayName\": \"strategy\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/first-match\"\n      },\n      {\n        \"name\": \"pool__DefaultPoolIndex\",\n        \"description\": \"Virtual Server: Default Pool Index\",\n        \"displayName\": \"DefaultPoolIndex\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"pool__MemberDefaultPort\",\n        \"description\": \"Pool: Member Default Port\",\n        \"displayName\": \"MemberDefaultPort\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"pool__addr\",\n        \"description\": \"Virtual Server: Address\",\n        \"displayName\": \"addr\",\n        \"isRequired\": true,\n        \"defaultValue\": \"\",\n        \"providerType\": \"NODE\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"pool__mask\",\n        \"description\": \"Virtual Server: Mask\",\n        \"displayName\": \"mask\",\n        \"isRequired\": true,\n        \"provider\": \"255.255.255.255\"\n      },\n      {\n        \"name\": \"pool__port\",\n        \"description\": \"Virtual Server: Port\",\n        \"displayName\": \"port\",\n        \"isRequired\": true,\n        \"defaultValue\": \"80\",\n        \"providerType\": \"PORT\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"vs__AdvOptions\",\n        \"description\": \"Virtual Server: Advanced Options\",\n        \"displayName\": \"AdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvPolicies\",\n        \"description\": \"Virtual Server: Advanced Policies\",\n        \"displayName\": \"AdvPolicies\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__AdvProfiles\",\n        \"description\": \"Virtual Server: Advanced Profiles\",\n        \"displayName\": \"AdvProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/websecurity\"\n      },\n      {\n        \"name\": \"vs__ConnectionLimit\",\n        \"description\": \"Virtual Server: Virtual Server Connection Limit (0=unlimited)\",\n        \"displayName\": \"ConnectionLimit\",\n        \"isRequired\": false,\n        \"provider\": \"0\"\n      },\n      {\n        \"name\": \"vs__Description\",\n        \"description\": \"Virtual Server: Description\",\n        \"displayName\": \"Description\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__IpProtocol\",\n        \"description\": \"Virtual Server: IP Protocol\",\n        \"displayName\": \"IpProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"tcp\"\n      },\n      {\n        \"name\": \"vs__Irules\",\n        \"description\": \"Virtual Server: iRules (to specify multiple iRules seperate with a comma ex: irule1,irule2,irule3)\",\n        \"displayName\": \"Irules\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__Name\",\n        \"description\": \"Virtual Server: Name\",\n        \"displayName\": \"Name\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__OptionConnectionMirroring\",\n        \"description\": \"Virtual Server: Connection Mirroring\",\n        \"displayName\": \"OptionConnectionMirroring\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"enabled\",\n            \"description\": \"enabled\"\n          },\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__OptionSourcePort\",\n        \"description\": \"Virtual Server: Source Port Behavior\",\n        \"displayName\": \"OptionSourcePort\",\n        \"isRequired\": false,\n        \"provider\": \"preserve\",\n        \"choices\": [\n          {\n            \"value\": \"preserve\",\n            \"description\": \"preserve\"\n          },\n          {\n            \"value\": \"preserve-strict\",\n            \"description\": \"preserve-strict\"\n          },\n          {\n            \"value\": \"change\",\n            \"description\": \"change\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__ProfileAccess\",\n        \"description\": \"Virtual Server: Access Profile\",\n        \"displayName\": \"ProfileAccess\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileAnalytics\",\n        \"description\": \"Virtual Server: Analytics Profile\",\n        \"displayName\": \"ProfileAnalytics\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientProtocol\",\n        \"description\": \"Virtual Server: Client-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileClientProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/tcp-wan-optimized\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSL\",\n        \"description\": \"Virtual Server: Client SSL Profile\",\n        \"displayName\": \"ProfileClientSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLAdvOptions\",\n        \"description\": \"Virtual Server: Client SSL Advanced Options\",\n        \"displayName\": \"ProfileClientSSLAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCert\",\n        \"description\": \"Virtual Server: Client SSL Certificate\",\n        \"displayName\": \"ProfileClientSSLCert\",\n        \"isRequired\": false,\n        \"defaultValue\": \"/Common/default.crt\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLChain\",\n        \"description\": \"Virtual Server: Client SSL Certificate Chain\",\n        \"displayName\": \"ProfileClientSSLChain\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLCipherString\",\n        \"description\": \"Virtual Server: Client SSL Cipher String\",\n        \"displayName\": \"ProfileClientSSLCipherString\",\n        \"isRequired\": false,\n        \"provider\": \"DEFAULT\"\n      },\n      {\n        \"name\": \"vs__ProfileClientSSLKey\",\n        \"description\": \"Virtual Server: Client SSL Key\",\n        \"displayName\": \"ProfileClientSSLKey\",\n        \"isRequired\": false,\n        \"defaultValue\": \"/Common/default.key\"\n      },\n      {\n        \"name\": \"vs__ProfileCompression\",\n        \"description\": \"Virtual Server: Compression Profile\",\n        \"displayName\": \"ProfileCompression\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileConnectivity\",\n        \"description\": \"Virtual Server: Connectivity Profile\",\n        \"displayName\": \"ProfileConnectivity\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileDefaultPersist\",\n        \"description\": \"Virtual Server: Default Persistence Profile\",\n        \"displayName\": \"ProfileDefaultPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileFallbackPersist\",\n        \"description\": \"Virtual Server: Fallback Persistence Profile\",\n        \"displayName\": \"ProfileFallbackPersist\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileHTTP\",\n        \"description\": \"Virtual Server: HTTP Profile\",\n        \"displayName\": \"ProfileHTTP\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/http\"\n      },\n      {\n        \"name\": \"vs__ProfileOneConnect\",\n        \"description\": \"Virtual Server: OneConnect Profile\",\n        \"displayName\": \"ProfileOneConnect\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfilePerRequest\",\n        \"description\": \"Virtual Server: Per-Request Profile\",\n        \"displayName\": \"ProfilePerRequest\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileRequestLogging\",\n        \"description\": \"Virtual Server: Request Logging Profile\",\n        \"displayName\": \"ProfileRequestLogging\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityDoS\",\n        \"description\": \"Virtual Server: Security: DoS Profile\",\n        \"displayName\": \"ProfileSecurityDoS\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityIPBlacklist\",\n        \"description\": \"Virtual Server: IP Blacklist Profile\",\n        \"displayName\": \"ProfileSecurityIPBlacklist\",\n        \"isRequired\": false,\n        \"provider\": \"none\"\n      },\n      {\n        \"name\": \"vs__ProfileSecurityLogProfiles\",\n        \"description\": \"Virtual Server: Security Logging Profiles\",\n        \"displayName\": \"ProfileSecurityLogProfiles\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__ProfileServerProtocol\",\n        \"description\": \"Virtual Server: Server-side L4 Protocol Profile\",\n        \"displayName\": \"ProfileServerProtocol\",\n        \"isRequired\": false,\n        \"provider\": \"/Common/tcp-wan-optimized\"\n      },\n      {\n        \"name\": \"vs__ProfileServerSSL\",\n        \"description\": \"Virtual Server: Server SSL Profile\",\n        \"displayName\": \"ProfileServerSSL\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"vs__RouteAdv\",\n        \"description\": \"Virtual Server: Route Advertisement\",\n        \"displayName\": \"RouteAdv\",\n        \"isRequired\": false,\n        \"provider\": \"disabled\",\n        \"choices\": [\n          {\n            \"value\": \"disabled\",\n            \"description\": \"disabled\"\n          },\n          {\n            \"value\": \"all_vs\",\n            \"description\": \"all_vs\"\n          },\n          {\n            \"value\": \"any_vs\",\n            \"description\": \"any_vs\"\n          },\n          {\n            \"value\": \"always\",\n            \"description\": \"always\"\n          }\n        ]\n      },\n      {\n        \"name\": \"vs__SNATConfig\",\n        \"description\": \"Virtual Server: SNAT Configuration (enter SNAT pool name, 'automap' or leave blank to disable SNAT)\",\n        \"displayName\": \"SNATConfig\",\n        \"isRequired\": false,\n        \"provider\": \"automap\"\n      },\n      {\n        \"name\": \"vs__SourceAddress\",\n        \"description\": \"Virtual Server: Source Address\",\n        \"displayName\": \"SourceAddress\",\n        \"isRequired\": false,\n        \"provider\": \"0.0.0.0/0\"\n      },\n      {\n        \"name\": \"vs__VirtualAddrAdvOptions\",\n        \"description\": \"Virtual Address: Advanced Options\",\n        \"displayName\": \"VirtualAddrAdvOptions\",\n        \"isRequired\": false,\n        \"provider\": \"\"\n      },\n      {\n        \"name\": \"app_stats\",\n        \"description\": \"Enable health and performance monitoring.\",\n        \"displayName\": \"app_stats\",\n        \"isRequired\": false,\n        \"provider\": \"enabled\"\n      }\n    ],\n    \"tables\": [\n      {\n        \"name\": \"feature__easyL4FirewallBlacklist\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Blacklisted Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"feature__easyL4FirewallSourceList\",\n        \"columns\": [\n          {\n            \"name\": \"CIDRRange\",\n            \"description\": \"CIDR Block:\",\n            \"isRequired\": false,\n            \"provider\": \"0.0.0.0/0\"\n          }\n        ],\n        \"description\": \"Security: Firewall: Static Allowed Source Addresses (CIDR Format)\"\n      },\n      {\n        \"name\": \"l7policy__rulesAction\",\n        \"columns\": [\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Parameter\",\n            \"description\": \"Parameter:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Target\",\n            \"description\": \"Target:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Action\"\n      },\n      {\n        \"name\": \"l7policy__rulesMatch\",\n        \"columns\": [\n          {\n            \"name\": \"CaseSensitive\",\n            \"description\": \"Case Sensitive:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Condition\",\n            \"description\": \"Condition:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Group\",\n            \"description\": \"Group:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Missing\",\n            \"description\": \"Missing:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Negate\",\n            \"description\": \"Negate:\",\n            \"isRequired\": false,\n            \"provider\": \"no\"\n          },\n          {\n            \"name\": \"Operand\",\n            \"description\": \"Operand:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Value\",\n            \"description\": \"Value:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          }\n        ],\n        \"description\": \"L7 Policy: Rules: Matching\"\n      },\n      {\n        \"name\": \"pool__Members\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"ConnectionLimit\",\n            \"description\": \"Connection Limit:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"IPAddress\",\n            \"description\": \"IP/Node Name:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\",\n            \"providerType\": \"NODE\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Pool Idx:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Port\",\n            \"description\": \"Port:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"80\",\n            \"providerType\": \"PORT\"\n          },\n          {\n            \"name\": \"PriorityGroup\",\n            \"description\": \"Priority Group:\",\n            \"isRequired\": false,\n            \"provider\": \"0\"\n          },\n          {\n            \"name\": \"Ratio\",\n            \"description\": \"Ratio:\",\n            \"isRequired\": false,\n            \"provider\": \"1\"\n          },\n          {\n            \"name\": \"State\",\n            \"description\": \"State:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"enabled\"\n          }\n        ],\n        \"description\": \"Pool: Members\",\n        \"serverTier\": \"Default\"\n      },\n      {\n        \"name\": \"pool__Pools\",\n        \"columns\": [\n          {\n            \"name\": \"AdvOptions\",\n            \"description\": \"Adv Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Description\",\n            \"description\": \"Description:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"LbMethod\",\n            \"description\": \"LB Method:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"round-robin\"\n          },\n          {\n            \"name\": \"Monitor\",\n            \"description\": \"Monitor(s):\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Pool: Pool Table\"\n      },\n      {\n        \"name\": \"vs__BundledItems\",\n        \"columns\": [\n          {\n            \"name\": \"Resource\",\n            \"description\": \"Resource:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Bundled Items\"\n      },\n      {\n        \"name\": \"vs__Listeners\",\n        \"columns\": [\n          {\n            \"name\": \"Destination\",\n            \"description\": \"Destination\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Listener\",\n            \"description\": \"Listener:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Virtual Server: Additional Listeners\"\n      },\n      {\n        \"name\": \"monitor__Monitors\",\n        \"columns\": [\n          {\n            \"name\": \"Index\",\n            \"description\": \"Index:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"0\",\n            \"validator\": \"NonNegativeNumber\"\n          },\n          {\n            \"name\": \"Name\",\n            \"description\": \"Name:\",\n            \"isRequired\": false,\n            \"defaultValue\": \"\"\n          },\n          {\n            \"name\": \"Options\",\n            \"description\": \"Options:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          },\n          {\n            \"name\": \"Type\",\n            \"description\": \"Type:\",\n            \"isRequired\": false,\n            \"provider\": \"\"\n          }\n        ],\n        \"description\": \"Monitor: Monitor Table\"\n      }\n    ]\n  }\n}"
						},
						"description": ""
					},
					"response": []
				}
			]
		},
		{
			"name": "4_iWorkflow_Deploy_Example_Services",
			"description": "Create example Tenant Deployments using the Service Catalog examples through an F5 iWorkflow device\n\nInput Variables:\niwf_mgmt\t\t\t\tF5 iWorkflow Management Address\niwf_auth_token\t\t\t\tREST API Authentication Token\nappsvcs_vip_addr\t\tVirtual Server Listening IP\nappsvcs_vip_port\t\tVirtual Server Listening Port\nappsvcs_member1_addr\tPool Member 1 IP Address\nappsvcs_member1_port\tPool Member 1 Port\nappsvcs_member2_addr\tPool Member 2 IP Address\nappsvcs_member2_port\tPool Member 2 Port\n",
			"item": [
				{
					"name": "Deploy example-f5-http-lb Service",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"name\",",
									"            \"value\":\"example-f5-https-offload\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}"
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/tenants/{{iwf_tenant_name}}/services/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"name\": \"example-f5-http-lb\",\n  \"tenantTemplateReference\": {\n    \"link\": \"https://localhost/mgmt/cm/cloud/tenant/templates/iapp/f5-http-lb\"\n  },\n  \"vars\": [\n    {\n      \"name\": \"pool__addr\",\n      \"value\": \"{{appsvcs_vip_addr}}\"\n    },\n    {\n      \"name\": \"pool__port\",\n      \"value\": \"{{appsvcs_vip_port}}\"\n    }\n  ],\n  \"tables\": [\n    {\n      \"name\": \"pool__Members\",\n      \"columns\": [\n        \"IPAddress\",\n        \"State\"\n      ],\n      \"rows\": [\n        [\n          \"{{appsvcs_member1_addr}}\",\n          \"enabled\"\n        ],\n        [\n          \"{{appsvcs_member2_addr}}\",\n          \"enabled\"\n        ]\n      ]\n    }\n  ],\n  \"properties\": [\n    {\n      \"id\": \"cloudConnectorReference\",\n      \"value\": \"https://localhost/mgmt/cm/cloud/connectors/local/{{iwf_connector_uuid}}\"\n    }\n  ]\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "Deploy example-f5-https-offload Service",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"name\",",
									"            \"value\":\"example-f5-https-offload\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/tenants/{{iwf_tenant_name}}/services/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"name\": \"example-f5-https-offload\",\n  \"tenantTemplateReference\": {\n    \"link\": \"https://localhost/mgmt/cm/cloud/tenant/templates/iapp/f5-https-offload\"\n  },\n  \"properties\": [\n    {\n      \"id\": \"cloudConnectorReference\",\n      \"value\": \"https://localhost/mgmt/cm/cloud/connectors/local/{{iwf_connector_uuid}}\"\n    }\n  ],\n  \"tables\": [\n    {\n      \"name\": \"pool__Members\",\n      \"columns\": [\n        \"IPAddress\",\n        \"State\"\n      ],\n      \"rows\": [\n        [\n          \"{{appsvcs_member1_addr}}\",\n          \"enabled\"\n        ],\n        [\n          \"{{appsvcs_member2_addr}}\",\n          \"enabled\"\n        ]\n      ]\n    }\n  ],\n  \"vars\": [\n    {\n      \"name\": \"pool__addr\",\n      \"value\": \"{{appsvcs_vip_addr}}\"\n    },\n    {\n      \"name\": \"pool__port\",\n      \"value\": \"{{appsvcs_vip_port}}\"\n    },\n    {\n      \"name\": \"vs__ProfileClientSSLCert\",\n      \"value\": \"/Common/default.crt\"\n    },\n    {\n      \"name\": \"vs__ProfileClientSSLKey\",\n      \"value\": \"/Common/default.key\"\n    }\n  ]\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "Deploy example-f5-fastl4-tcp-lb Service",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"name\",",
									"            \"value\":\"example-f5-fastl4-tcp-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/tenants/{{iwf_tenant_name}}/services/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"name\": \"example-f5-fastl4-tcp-lb\",\n  \"tenantTemplateReference\": {\n    \"link\": \"https://localhost/mgmt/cm/cloud/tenant/templates/iapp/f5-fastl4-tcp-lb\"\n  },\n  \"properties\": [\n    {\n      \"id\": \"cloudConnectorReference\",\n      \"value\": \"https://localhost/mgmt/cm/cloud/connectors/local/{{iwf_connector_uuid}}\"\n    }\n  ],  \n  \"vars\": [\n    {\n      \"name\": \"pool__addr\",\n      \"value\": \"{{appsvcs_vip_addr}}\"\n    },\n    {\n      \"name\": \"pool__port\",\n      \"value\": \"{{appsvcs_vip_port}}\"\n    }\n  ],\n  \"tables\": [\n    {\n      \"name\": \"pool__Pools\",\n      \"columns\": [\n        \"LbMethod\"\n      ],\n      \"rows\": [\n        [\n          \"round-robin\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"monitor__Monitors\",\n      \"columns\": [\n        \"Name\"\n      ],\n      \"rows\": [\n        [\n          \"/Common/tcp\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"pool__Members\",\n      \"columns\": [\n        \"IPAddress\",\n        \"Port\",\n        \"State\"\n      ],\n      \"rows\": [\n        [\n          \"{{appsvcs_member1_addr}}\",\n          \"{{appsvcs_member1_port}}\",\n          \"enabled\"\n        ],\n        [\n          \"{{appsvcs_member2_addr}}\",\n          \"{{appsvcs_member2_port}}\",\n          \"enabled\"\n        ]\n      ]\n    }\n  ]\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "Deploy example-f5-fastl4-udp-lb Service",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"name\",",
									"            \"value\":\"example-f5-fastl4-udp-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}"
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/tenants/{{iwf_tenant_name}}/services/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"name\": \"example-f5-fastl4-udp-lb\",\n  \"tenantTemplateReference\": {\n    \"link\": \"https://localhost/mgmt/cm/cloud/tenant/templates/iapp/f5-fastl4-udp-lb\"\n  },\n  \"properties\": [\n    {\n      \"id\": \"cloudConnectorReference\",\n      \"value\": \"https://localhost/mgmt/cm/cloud/connectors/local/{{iwf_connector_uuid}}\"\n    }\n  ],  \n  \"vars\": [\n    {\n      \"name\": \"pool__addr\",\n      \"value\": \"{{appsvcs_vip_addr}}\"\n    },\n    {\n      \"name\": \"pool__port\",\n      \"value\": \"{{appsvcs_vip_port}}\"\n    }\n  ],\n  \"tables\": [\n    {\n      \"name\": \"pool__Pools\",\n      \"columns\": [\n        \"LbMethod\"\n      ],\n      \"rows\": [\n        [\n          \"round-robin\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"monitor__Monitors\",\n      \"columns\": [\n        \"Name\"\n      ],\n      \"rows\": [\n        [\n          \"/Common/udp\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"pool__Members\",\n      \"columns\": [\n        \"IPAddress\",\n        \"Port\",\n        \"State\"\n      ],\n      \"rows\": [\n        [\n          \"{{appsvcs_member1_addr}}\",\n          \"{{appsvcs_member1_port}}\",\n          \"enabled\"\n        ],\n        [\n          \"{{appsvcs_member2_addr}}\",\n          \"{{appsvcs_member2_port}}\",\n          \"enabled\"\n        ]\n      ]\n    }\n  ]\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "Deploy example-f5-fasthttp-lb Service",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"name\",",
									"            \"value\":\"example-f5-fasthttp-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/tenants/{{iwf_tenant_name}}/services/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"name\": \"example-f5-fasthttp-lb\",\n  \"tenantTemplateReference\": {\n    \"link\": \"https://localhost/mgmt/cm/cloud/tenant/templates/iapp/f5-fasthttp-lb\"\n  },\n  \"vars\": [\n    {\n      \"name\": \"pool__addr\",\n      \"value\": \"{{appsvcs_vip_addr}}\"\n    },\n    {\n      \"name\": \"pool__port\",\n      \"value\": \"{{appsvcs_vip_port}}\"\n    }\n  ],\n  \"tables\": [\n    {\n      \"name\": \"pool__Members\",\n      \"columns\": [\n        \"IPAddress\",\n        \"State\"\n      ],\n      \"rows\": [\n        [\n          \"{{appsvcs_member1_addr}}\",\n          \"enabled\"\n        ],\n        [\n          \"{{appsvcs_member2_addr}}\",\n          \"enabled\"\n        ]\n      ]\n    }\n  ],\n  \"properties\": [\n    {\n      \"id\": \"cloudConnectorReference\",\n      \"value\": \"https://localhost/mgmt/cm/cloud/connectors/local/{{iwf_connector_uuid}}\"\n    }\n  ]\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "Deploy example-f5-http-url-routing-lb Service",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"name\",",
									"            \"value\":\"example-f5-http-url-routing-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/tenants/{{iwf_tenant_name}}/services/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "{\n  \"name\": \"example-f5-http-url-routing-lb\",\n  \"tenantTemplateReference\": {\n    \"link\": \"https://localhost/mgmt/cm/cloud/tenant/templates/iapp/f5-http-url-routing-lb\"\n  },\n  \"vars\": [\n    {\n      \"name\": \"pool__addr\",\n      \"value\": \"{{appsvcs_vip_addr}}\"\n    },\n    {\n      \"name\": \"pool__port\",\n      \"value\": \"{{appsvcs_vip_port}}\"\n    }\n  ],\n  \"tables\": [\n    {\n      \"name\": \"pool__Pools\",\n      \"columns\": [\n        \"Index\",\n        \"LbMethod\",\n        \"Monitor\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"round-robin\",\n          \"0\"\n        ],\n        [\n          \"1\",\n          \"round-robin\",\n          \"0\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"monitor__Monitors\",\n      \"columns\": [\n        \"Index\",\n        \"Name\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"\\/Common\\/http\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"l7policy__rulesMatch\",\n      \"columns\": [\n        \"Group\",\n        \"Operand\",\n        \"Condition\",\n        \"Value\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"http-uri\\/request\\/path\",\n          \"starts-with\",\n          \"\\/a\"\n        ],\n        [\n          \"1\",\n          \"http-uri\\/request\\/path\",\n          \"starts-with\",\n          \"\\/b\"\n        ],\n        [\n          \"default\",\n          \"\",\n          \"\",\n          \"\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"l7policy__rulesAction\",\n      \"columns\": [\n        \"Group\",\n        \"Target\",\n        \"Parameter\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"forward\\/request\\/select\\/pool\",\n          \"pool:0\"\n        ],\n        [\n          \"1\",\n          \"forward\\/request\\/select\\/pool\",\n          \"pool:1\"\n        ],\n        [\n          \"default\",\n          \"forward\\/request\\/reset\",\n          \"none\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"pool__Members\",\n      \"columns\": [\n        \"Index\",\n        \"IPAddress\",\n        \"Port\",\n        \"State\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"{{appsvcs_member1_addr}}\",\n          \"{{appsvcs_member1_port}}\",\n          \"enabled\"\n        ],\n        [\n          \"0\",\n          \"{{appsvcs_member2_addr}}\",\n          \"{{appsvcs_member2_port}}\",\n          \"enabled\"\n        ]\n      ]\n    }\n  ],\n  \"properties\": [\n    {\n      \"id\": \"cloudConnectorReference\",\n      \"isRequired\": false,\n      \"value\": \"https:\\/\\/localhost\\/mgmt\\/cm\\/cloud\\/connectors\\/local\\/{{iwf_connector_uuid}}\"\n    }\n  ]\n}"
						},
						"description": ""
					},
					"response": []
				},
				{
					"name": "Deploy example-f5-https-waf-lb Service",
					"event": [
						{
							"listen": "test",
							"script": {
								"type": "text/javascript",
								"exec": [
									"if(typeof postman.getGlobalVariable(\"_f5_workflow_functions\") != 'undefined') {",
									"    eval(postman.getGlobalVariable(\"_f5_workflow_functions\"));",
									"    ",
									"    var check_vals = [",
									"        {",
									"            \"path\":\"name\",",
									"            \"value\":\"example-f5-https-waf-lb\"",
									"        }",
									"    ];",
									"    ",
									"    f5_check_response(check_vals);",
									"}",
									""
								]
							}
						}
					],
					"request": {
						"url": "https://{{iwf_mgmt}}/mgmt/cm/cloud/tenants/{{iwf_tenant_name}}/services/iapp",
						"method": "POST",
						"header": [
							{
								"key": "Content-Type",
								"value": "application/json",
								"description": ""
							},
							{
								"key": "X-F5-Auth-Token",
								"value": "{{iwf_auth_token}}",
								"description": ""
							}
						],
						"body": {
							"mode": "raw",
							"raw": "\n    {\n      \"name\": \"example-f5-https-waf-lb\",\n      \"tenantTemplateReference\": {\n        \"link\": \"https://localhost/mgmt/cm/cloud/tenant/templates/iapp/f5-https-waf-lb\"\n      },\n  \"vars\": [\n    {},\n    {\n      \"name\": \"pool__addr\",\n      \"value\": \"{{appsvcs_vip_addr}}\"\n    },\n    {\n      \"name\": \"pool__port\",\n      \"value\": \"{{appsvcs_vip_port}}\"\n    },\n    {},\n    {\n      \"name\": \"vs__ProfileClientSSLCert\",\n      \"value\": \"/Common/default.crt\"\n    },\n    {\n      \"name\": \"vs__ProfileClientSSLKey\",\n      \"value\": \"/Common/default.key\"\n    }\n  ],\n  \"tables\": [\n    {\n      \"name\": \"pool__Pools\",\n      \"columns\": [\n        \"Index\",\n        \"LbMethod\",\n        \"Monitor\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"round-robin\",\n          \"0\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"monitor__Monitors\",\n      \"columns\": [\n        \"Index\",\n        \"Name\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"/Common/http\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"l7policy__rulesMatch\",\n      \"columns\": [\n        \"Group\",\n        \"Operand\",\n        \"Condition\",\n        \"Value\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"http-uri/request/path\",\n          \"starts-with\",\n          \"/\"\n        ],\n        [\n          \"default\",\n          \"\",\n          \"\",\n          \"\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"l7policy__rulesAction\",\n      \"columns\": [\n        \"Group\",\n        \"Target\",\n        \"Parameter\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"asm/request/enable/policy\",\n          \"/Common/my_demo_policy\"\n        ],\n        [\n          \"0\",\n          \"forward/request/select/pool\",\n          \"pool:0\"\n        ],\n        [\n          \"default\",\n          \"forward/request/reset\",\n          \"\"\n        ]\n      ]\n    },\n    {\n      \"name\": \"pool__Members\",\n      \"columns\": [\n        \"Index\",\n        \"IPAddress\",\n        \"Port\",\n        \"State\"\n      ],\n      \"rows\": [\n        [\n          \"0\",\n          \"{{appsvcs_member1_addr}}\",\n          \"{{appsvcs_member1_port}}\",\n          \"enabled\"\n        ],\n        [\n          \"0\",\n          \"{{appsvcs_member2_addr}}\",\n          \"{{appsvcs_member2_port}}\",\n          \"enabled\"\n        ]\n      ]\n    }\n  ],\n      \"properties\": [\n        {\n          \"id\": \"cloudConnectorReference\",\n          \"isRequired\": false,\n          \"value\": \"https://localhost/mgmt/cm/cloud/connectors/local/{{iwf_connector_uuid}}\"\n        }\n      ]\n    }"
						},
						"description": ""
					},
					"response": []
				}
			]
		}
	]
}