For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MrBelvedr_64046's avatar
MrBelvedr_64046
Icon for Nimbostratus rankNimbostratus
Oct 03, 2008

iRule to log failed/problematic connections

We have a need to log any and all virtual server connections that are failed, refused, or problematic in any way. Our company has many mobile phones that transmit large amounts of data thru the f5 to our database. So, we sometimes experience problems with dropped connections, timeouts, etc.

 

 

We have a few SSL virtual servers set up, we are also interested in logging any SSL related issues or connection problems.

 

 

I should note that several of our virtual servers are set up as standard socket servers, not specific protocols known to f5.

 

 

What are the possibilities to do this??

 

 

Thx!
application delivery
dev
devops
iRules

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 06, 2008
    Hi MrB,

     

     

    I think you'll have a difficult time logging client info for specific TCP layer issues using iRules. iRules don't provide that level of detail at the TCP layer. SSL errors could be parsed using the SSL:: commands (Click here). For HTTP, you could log a message on the request and one on the response, and parse the ltm log file for unanswered requests. This last option would potentially eat up a lot of resources though.

     

     

    For more global stats, you can check the following commands for info:

     

     

    b global

     

    b virtual VIP_NAME

     

    b profile TCP_PROFILE_NAME

     

    b profile CLIENTSSL_PROFILE_NAME

     

    b profile HTTP_PROFILE_NAME

     

     

    Anyone else have ideas on this?

     

     

    Thanks,

     

    Aaron