For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bciesz_171056's avatar
Bciesz_171056
Icon for Cirrus rankCirrus
Jan 18, 2017

iRule to log every SSL related event on VS

Hi, I need an iRule, that would put all SSL related events to a log file on a particular VS.   The reason is that one of the applications connecting to a server behind F5 loadbalancer is experie...
application delivery
BIG-IP
iRules
jgranieri's avatar
jgranieri
Icon for Nimbostratus rankNimbostratus
Jan 19, 2017

I would recommend writing an irule that will execute log statements for every SSL event your VS will perform.

 

[https://devcentral.f5.com/wiki/irules.ssl.ashx]

 

CLIENTSSL_CLIENTCERT - Triggered when the system adds an SSL client certificate to the client certificate chain. CLIENTSSL_CLIENTHELLO - Triggered when the system has received the client's SSL ClientHello message CLIENTSSL_DATA - Triggered each time new SSL data is received from the client while the connection is in “collect” state. CLIENTSSL_HANDSHAKE - Triggered when a client-side SSL handshake is completed. CLIENTSSL_SERVERHELLO_SEND - Triggered when the system is about to send its SSL ServerHello message on the clientside connection SERVERSSL_CLIENTHELLO_SEND - Triggered when the system is about to send its SSL ClientHello message. SERVERSSL_DATA - Triggered when new SSL data is received from the target node after command has been issued. SERVERSSL_HANDSHAKE - Triggered when a server-side SSL handshake is completed. SERVERSSL_SERVERHELLO - Triggered when the system has received the server's SSL ServerHello message.