LTM policy to x forward the cipher suite used for TLS

Hi jomedusa​,

take a look at this K article: K14525024: Log negotiated SSL cipher suite used by Client and Virtual Server

I recommend using iRules over LTM policies for logging and adding/modifying HTTP headers, because of their flexibility.
You can log TLS version and cipher suite used in two different custom headers,like X-TLS-Cipher-Version and X-TLS-Cipher-Name, instead of abusing the XFF header for logging.

when HTTP_REQUEST {
        # Only makes sense on an TLS-terminated virtual server
        HTTP::header insert X-TLS-Cipher-Name [SSL::cipher name]
        HTTP::header insert X-TLS-Cipher-Version [SSL::cipher version]
}

Cheers

Daniel