F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

AngryCat_52750's avatar
AngryCat_52750
Icon for Nimbostratus rankNimbostratus
Feb 17, 2016

ldap vip irule

We currently load balance LDAP (tcp-389) to multiple back-end auth systems. We use VLAN Groups so the end points can see the source ip information. We are moving off to a SNAT model but we will need ...
application delivery
iRules
LTM
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Feb 18, 2016

Hi Kulastone,

 

iRules can parse LDAP out of the box. But LDAP request are ASN.1/BER encoded with a plain-text query part. So depending on your detailed logging requirements, you wouldn't need to dig into the ASN.1/BER encoded part and use rather simple [string] commands to retrive the log information directly out of the queries.

 

If you're able to specify the detailed logging requirements, I could help you to find the right starting point.

 

Cheers, Kai