For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

f5mkuDefault's avatar
Apr 08, 2021
Solved

How does F5 process a traffic

Hi experts,

 

Wanted to ask as I keep having hardtime googling to find an answer.

 

How does F5 process a traffic when a client initiates?

Does assume 3 way is completed, will F5 process SSL before irule? or F5 will check the irule first?

 

TIA

  • Take a look at this video from : https://youtu.be/qCLEw5xIZ7s

    It is for BIG-IP 12.1, but it is still relevant and very helpful.

    I watched it for like 45 minutes in Slow-Mo and replicated his drawing into a Visio. I attached my Visio as png.

    iRules are executed before, while and after the SSL handshake. Depending on the Event you choose.

    when CLIENT_ACCEPTED { ## happens when the TCP three-way handshake is completed successfully, before the SSL Handshake
     
    when CLIENTSSL_CLIENTHELLO { ## happens while the SSL Handshake
     
    when HTTP_REQUEST { ## happens after the SSL Handshake

2 Replies

  • Take a look at this video from : https://youtu.be/qCLEw5xIZ7s

    It is for BIG-IP 12.1, but it is still relevant and very helpful.

    I watched it for like 45 minutes in Slow-Mo and replicated his drawing into a Visio. I attached my Visio as png.

    iRules are executed before, while and after the SSL handshake. Depending on the Event you choose.

    when CLIENT_ACCEPTED { ## happens when the TCP three-way handshake is completed successfully, before the SSL Handshake
     
    when CLIENTSSL_CLIENTHELLO { ## happens while the SSL Handshake
     
    when HTTP_REQUEST { ## happens after the SSL Handshake
    • f5mkuDefault's avatar
      f5mkuDefault
      Icon for Cirrus rankCirrus

      this is my same understanding, really depends on the event type used. Will check that video and visio file. Thanks Daniel.