For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

samdlee_305622's avatar
samdlee_305622
Icon for Nimbostratus rankNimbostratus
Mar 24, 2017

iRule is called many times for the same multipart/form-data form post

Hei, I've encountered a very confusing situation where a web form tries to upload a file together with some other info. In iRule associated with HTTP_REQUEST replaced the original HOST header with an...
devops
iRules
LTM
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Mar 27, 2017

Hi Samdlee,

keep an eyee on the TMM ID record of the individual log entries. Its flipping between TMM, TMM1, TMM2 as well as TMM3. This will indicate that you see at least 4 independent TCP connections and not a single request that triggers the iRule code multiple times.

I would recommend to extend the label "1xx.my.ip.addr" with TCP::client_port] or to generate a collision free connection ID via set conn_id "[clock clicks][TMM::cmp_unit]" during the CLIENT_ACCEPTED event and then add this connection ID to your logging statements ...

Cheers, Kai