Forum Discussion

EastCoast_16835's avatar
EastCoast_16835
Icon for Altostratus rankAltostratus
Apr 30, 2019

HTTP_RESPONSE event not invoked after APM

Hello,

 

We encountered a situation that after a successful APM logon event the HTTP_RESPONSE and HTTP_RESPONSE_DATA events are not fired. We are not able to access them from LTM irules.

 

These events are still invoked and are available while APM evaluates the policy but once the policy is completed successfully with Allow the events are not fired any more.

 

However, HTTP_RESPONSE_RELEASE is fired all the time without issues.

 

Is this normal or expected? Is there any workaround to prevent APM from hiding these events?

 

We need to submit HTTP::retry from the HTTP_RESPONSE event after APM.

 

Thank you

 

application delivery
BIG-IP Access Policy Manager (APM)
iRules
  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Apr 30, 2019

    It is hard to believe that HTTP_RESPONSE is not triggered when HTTP_RESPONSE_RELEASE is.

     

    Will you do some logging in your irule in the HTTP_RESPONSE event to see if this is really the case?

     

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Apr 30, 2019

    Hello,

     

    indeed, your behavior is quite strange.

     

    normally the event (HTTP_RESPONSE) is not triggered during APM evaluation because no request is submitted to the backend.

     

    but once the policy is evaluated and submitted to the backend you must see HTTP_RESPONSE trigged.

     

    what type of deployment did you put on your APM policy?

     

    • VPN
    • Application (with frontal perimeter security: apm)
    • Authentification (IDP, ...)

    Regards