Forum Discussion
Hans_Goes_36210
Sep 06, 2012Nimbostratus
logging iRule with 443 pool-members
Hi,
We have 2 Citrix Secure Gateway servers loadbalanced behind a F5-cluster.
The Virtual-Server balances every user to one of the 2 members which also run on port 443.
How can we log source/destination (and maybe other info) for this Virtual Server ?
Applying an iRule is not working as you need a http profile, but it's not http :)
Any thoughts on this ?
thanks,
Hans
- Richard__HarlanHistoric F5 AccountYou can do this through the event when client_accepted like below
- natheCirrocumulushgoes
- Kevin_StewartEmployeeYou definitely can't terminate the SSL for CSG traffic. In this case you only have access to TCP-based iRule events.
- Hans_Goes_36210NimbostratusHi Kevin, Richard,
- Kevin_StewartEmployeeActually, you can't use HTTP events and commands in an iRule without an HTTP profile. You can, however, as long as you have a TCP profile, apply TCP-based events and commands.
- Hans_Goes_36210NimbostratusThanks, it works !
- hooleylistCirrostratusIf you want to log the server address you'd need to use SERVER_CONNECTED as a serverside connection hasn't been established in CLIENT_ACCEPTED:
- Hans_Goes_36210NimbostratusI rewote your iRule as it gave an error:
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects