F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

rob_carr's avatar
rob_carr
Icon for Cirrocumulus rankCirrocumulus
May 27, 2020

Is it possible to discard client certificate session information after iRule processing?

 

We are implementing a service that has a MASSL requirement, and we have an iRule that looks at the DN and CN values of the client cert. In testing we have seen SSL consuming a large enough proportion of memory that the connection reaping is activated. If we weren't using an iRule we could disable the 'retain certificate' feature as described here: K19802202: Disabling the Retain Certificate option in an SSL profile to reduce memory pressure.

 

Is there a way to retain the certificate in session variables, complete iRule processing and then clear or discard the session variables?

No RepliesBe the first to reply