Forum Discussion

Francisco_Verde's avatar
Francisco_Verde
Icon for Altostratus rankAltostratus
Feb 16, 2018

http profile breaks down my virtual server

Each time I'm applying an HTTP profile on my virtual server the site is not accessible. If I put "none" at the HTTP profile, the site is accessible.   The weirdest thing is I have the same service...
application delivery
BIG-IP
LTM
Boggs_5738's avatar
Boggs_5738
Icon for Nimbostratus rankNimbostratus
Feb 17, 2018

you can review the ltm log [tailf /var/log/ltm]and verify what is returned when you have the http profile.

 

also, you can try to decrypt the packet capture so you see what is being exchanged.

 

use the syntax: tcpdump -nni 0.0:nnnp -s0 host -w /var/tmp/vs_http_fail.pcap -vv

 

 

use this to decrypt: K10209: Overview of packet tracing with the ssldump utility

 

or use the irule - apply it first to vs before running the pcap. also, make sure your session is fresh - so start from scratch - fresh browser session: see https://devcentral.f5.com/questions/ssldump-and-internal-hsm

 

when CLIENTSSL_HANDSHAKE {

 

log local0. "RSA Session-ID:[SSL::sessionid] Master-Key:[SSL::sessionsecret]”

 

}

try until you get the decrypted data, then, analyse further

 

good luck