Forum Discussion
tetsuro
Nimbostratus
Dec 12, 2018SSL disable/enable based on SSL Cipher
I want to enable/disable SSL based on SSL Cipher version.
I have created the following iRule, but it does not work as expected.
when CLIENTSSL_CLIENTHELLO {
log local0. "[SSL::cipher version]...
Hi AG,
Which version are you testing on? The simplest way to check the syntax is to make the changes via the GUI and then check the bigip.conf syntax for that version. You can then replicate the same command using bigpipe.
Aaron
- Amine_KadimiJun 23, 2022
MVP
Hi,
When you change the interval you also need to change the timeout, the rule is timeout = (3*interval + 1). So for interval=20, timeout should be 61.
If you remove the monitor from the pool, does the cpu consumption decrease? It's not very common that http monitors increase cpu usage of backend servers