Forum Discussion

Aimen_Bouziri_2's avatar
Aimen_Bouziri_2
Icon for Nimbostratus rankNimbostratus
Dec 07, 2006

Irule that is functionning in version 9.1.0 but not in 9.1.2

Hi,

 

 

- We are using an irule to enable the tunnelling of SSL data over plain HTTP via the CONNECT method for proxies. This irule is functionning correctly in version 9.1.0 but not in version 9.1.2, a lot of web sites are not accessible on the Internet (approximatly half of them) but I don't understand why. This irule is used to load balance through proxy Blue Coat. Without this irule, the HTTPS is not functionning.

 

 

- Here is an small explanation of the irule:

 

 

When a client try to access a HTTPS web sites (with a connect),

 

a variable is incremented. This allows to access a part of the algorithm that deactivate the HTTP profile when it is a HTTPS web site.

 

 

Here is the irule:

 

 

rule ProxyHTTP-NEW {

 

when HTTP_REQUEST {

 

HTTP::header remove "Proxy-Connection"

 

set sslreq 0

 

if {[string toupper [HTTP::method]] eq "CONNECT"}{

 

set httphost "CONNECT [HTTP::host]"

 

set sslreq 1

 

} else {

 

set httphost "GET [HTTP::host]"

 

}

 

}

 

when HTTP_REQUEST_SEND {

 

if { $sslreq equals 1 } {

 

HTTP::disable

 

}

 

}

 

}

 

 

Do you understand why this irule is functionning in version 9.1.0 but not in version 9.1.2?

 

 

Thanks in advance for your help.

 

 

Aimen BOUZIRI

1 Reply

  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    Hi Aimen -

     

     

    If you are seeing different behaviour between versions, you should log a case with F5 Support.

     

     

    They may be able to tell you why it's happening, but lots of things have been fixed since 9.1.2, so you might want to upgrade to the latest maintenance release (9.3.1 - Click here

     

     

    hth

     

    /deb