Forum Discussion
NimbostratusI am facing issue with the integeration with the mobile application to F5, using clientless APM
The behavior of mobile application is very different as it first ask to user to enter the URL, on success validation with the server it displays the login form to enter credentials and Submit. When submit we need to capture the username entered and execute the APM. On success response the user should be able to enter the application page otherwise the application error will display.
The APM used is in clientless mode, we are unable to figure out how to create a variable in irule which is session based but can be used with HTTP_Module parameter and also can be use in APM flow to check if the variable value exist then execute necessary steps otherwise ALLOW the connection.
As the solution can run only in clientless mode session variables values can’t be set in access_session_started otherwise the value will only be available when the APM gets executed completely because then only F5 is creating the session.
An irule-test is use to fetch the username from the authorization header, the fetched username has to pass as a parameter in HTTP Module also HTTP module only executes when this username is not blank
3 Replies
Usually to handle storable data in APM, you use Session Variables. Session variables can be GET and PUT any time after Access runs in the connection flow, using "ACCESS::session data set" and "ACCESS::session data get". In this way, you can transform an irule TCL variable into an APM session variable, or transform an APM session variable into a TCL variable.
If you want to perform some logic like "if xxx exist , then allow , otherwise deny" for APM, you usually do that inside of the Access Policy and NOT in irules.
harsha_sharma_1Thanks for replying back, in client less mode, session gets only established when APM executes completely, so session variables canot be set or access, is there any other options other than session variables- Can you describe what you're trying to do?
