For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

GioG's avatar
GioG
Icon for Nimbostratus rankNimbostratus
Sep 18, 2014

IRule no longer working after upgrade from 10.2.4 to 11.4.1

We have the following irule forcing host header to the name of the client ssl profile, it no longer works. It's sending data that the webserver doesn't like and the site won't load. Anyone have any idea how to rewrite this Irule in 11.4.1?

 

Also, anyone have a link to irule changes in the upgrade path that I supplied in the title any help is greatly appreciated.

 

when HTTP_REQUEST {

 

HTTP::header remove Host HTTP::header insert Host [PROFILE::clientssl name]

 

}

 

application delivery
deployment
devops
iRules
LTM

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Sep 18, 2014

    What you'll find in v11 systems is that objects are now prefaced by the container partitions that they're in. If you were to log the above PROFILE command, you'd probably see something like this:

    /Common/my-clientssl-profile

    One of the best ways to get around this then is to simply strip that partition value out of the string. For example, if you know the profile is in the Common partition:

    [string map -nocase {"/Common/" ""} [PROFILE::clientssl name]]

    will remove the /Common/ portion of the string and leave behind just the profile name.