For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Livius's avatar
Livius
Icon for Cirrus rankCirrus
Jul 12, 2018

Connections to pool are failing when iRule is applied

Hi guys,   I have a strange issue going on a production F5. This iRule was running fine until people started to report that the Pool members are not getting any traffic. I quickly removed the follo...
application delivery
LTM
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Jul 12, 2018

I have had experiences of variables set in CLIENTSSL_CLIENTCERT not being available in HTTP_REQUEST, especially if the client SSL profile doesn't always require the certificate. It's usual to write these values to the session table in these types of requests to avoid this issue. I can advise on this if it's something you'd like help with.

For now, try changing your HTTP_REQUEST event to this to check if the $cn variable exists before trying to use it as your iRule may be generating a TCL error. 

when HTTP_REQUEST {
    if {([info exists cn]) && ($cn ne "")} {
        HTTP::header insert "X-dev" $cn
        if { $static::XDEV_DEBUG_LOCAL } { 
            log local0. "INSERTED XDEV-HEADER for client [IP::client_addr]: $cn"}
        if { $static::XDEV_DEBUG_REMOTE } { 
            HSL::send $hsl "INSERTED XDEV-HEADER for client [IP::client_addr]: $cn"}
    } else {
        log local0. "cn variable does not exist, header not inserted"
    }
}