For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Snl's avatar
Snl
Icon for Cirrostratus rankCirrostratus
Oct 07, 2017

irule for log soure ip & uri for ssl

folks I am looking for irule to capture source ip & uri since i am not doing any ssl offloading on bigip and server directly listening on ssl

 

cheers snl

 

application delivery
iRules
LTM
security

1 Reply

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Oct 07, 2017

    Hi,

     

    If the BIGIP doesn’t decrypt ssl (offloading or bridging), it can’t know the URI.

     

    If it can, it would be a big security issue.

     

    The only information it can know is the SSL server name in SNI extension by decoding ssl packet.