Forum Discussion

usend_209769's avatar
usend_209769
Icon for Nimbostratus rankNimbostratus
Jul 03, 2015

Control data sent in SSL

Hi,   I have a F5 machine working as a SSL terminator, data from client to F5 go encrypted under SSL, from F5 to sever go clear.   Client needs that all binary information (response at applicat...
application delivery
devops
iRules
LTM
usend_209769's avatar
usend_209769
Icon for Nimbostratus rankNimbostratus
Jul 10, 2015

As an example, I get a response of 3MB from a server to F5 and I need that F5 send this information to client in a only one SSL packet. (Maximum SSL payload is bigger than any response from server)

A soon as information from server arrives to F5, this sends information to client (in different SSL packets) so I try this rule so all the information from server is stored in F5 and finally this send all information together to client with the hope that all information is sent in only one SSL packet.

But information is sent in different SSL packets of a payload of 1480 bytes. Is possible to force F5 to send all the information in only one SSL packet?

when CLIENT_ACCEPTED {
       TCP::collect
}


when CLIENT_DATA {
      set tcplen [TCP::payload length]

      if { $tcplen >= 3176448 } {
         TCP::release
         TCP::collect
     }
}