For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Snl's avatar
Snl
Icon for Cirrostratus rankCirrostratus
Oct 07, 2017

irule for log soure ip & uri for ssl

folks I am looking for irule to capture source ip & uri since i am not doing any ssl offloading on bigip and server directly listening on ssl   cheers snl  
application delivery
iRules
LTM
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 07, 2017

Hi,

 

If the BIGIP doesn’t decrypt ssl (offloading or bridging), it can’t know the URI.

 

If it can, it would be a big security issue.

 

The only information it can know is the SSL server name in SNI extension by decoding ssl packet.