For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

GioG's avatar
GioG
Icon for Nimbostratus rankNimbostratus
Sep 18, 2014

IRule no longer working after upgrade from 10.2.4 to 11.4.1

We have the following irule forcing host header to the name of the client ssl profile, it no longer works. It's sending data that the webserver doesn't like and the site won't load. Anyone have any...
application delivery
deployment
devops
iRules
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Sep 18, 2014

What you'll find in v11 systems is that objects are now prefaced by the container partitions that they're in. If you were to log the above PROFILE command, you'd probably see something like this:

/Common/my-clientssl-profile

One of the best ways to get around this then is to simply strip that partition value out of the string. For example, if you know the profile is in the Common partition:

[string map -nocase {"/Common/" ""} [PROFILE::clientssl name]]

will remove the /Common/ portion of the string and leave behind just the profile name.