For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

symtexxd's avatar
symtexxd
Icon for Nimbostratus rankNimbostratus
Mar 14, 2025

Diameter iRules attachment?

I'm creating iRules for a Diameter message routing virtual server.

I can't seem to get the events DIAMETER_INGRESS or DIAMETER_EGRESS to be executed by the irule.

I have the following simple iRule but but I get no log messages in /var/log/ltm when requests are sent.

 

when DIAMETER_INGRESS {
  log local0. "diameter ingress event detected"
  if {[DIAMETER::command] == 268} {
    log local0. "diameter eap request detected"
  
  }
}


when DIAMETER_EGRESS {
  log local0. "diameter egress event detected"
  if {[DIAMETER::command] == 268} {
    log local0. "diameter eap egress detected"
  
  }  
}
}

I've attached this iRule to the transport profile as well as the VS but no log messages.

The message routing configuration is working fine I get a request from upstream which F5 sends downstream and a response is back upstream.

What am I doing wrong?

 

3 Replies

    • symtexxd's avatar
      symtexxd
      Icon for Nimbostratus rankNimbostratus

      your article made me realize I was using the wrong events I think DIAMETER_INGRESS/DIAMETER_EGRESS events only execute when you're using a standard virtual server with a DIAMETER profile.  If you want to use iRules with message routing VS and MRF profiles you have to use the MR_INGRESS/MR_EGRESS events.   I'm not 100% if this is the case but it seems so.

    • symtexxd's avatar
      symtexxd
      Icon for Nimbostratus rankNimbostratus

      Hi,

      yes sorry that is because I copied and pasted from config stanza "tmsh ltm rule".

      where do you attach the irule? to the virtual server or the transport profile?