For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shiraz's avatar
Shiraz
Icon for Altostratus rankAltostratus
Jan 16, 2017

monitor for non FQDN host

Hello,

 

I am trying to use an HTTPS monitor for the below url

 

 

Where abcd is not FQDN host...

 

When I use a monitor without Receive string, everything works. But when I use the monitor with a receive string such as moved, 301 or anything else which I see in the response, its not working.

 

When I curl the pool member curl -v http://1.1.1.1/xyz using the IP.. Its responding and i am using the content from that response itself.

 

Will the monitor GET /xyz HTTP/1.1\r\nHost: abcd\r\nConnection: Close\r\n\r\n work??

 

Or I am supposed to leave the host as blank

 

GET /xyz HTTP/1.1\r\nHost: \r\nConnection: Close\r\n\r\n

 

Regards

 

2 Replies

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus

    When you send the curl... And it works... Use the exact same request. And place something from the response as the receive string.

     

    If that still fails then, assuming you have access to the HTTPS server keys, use ssldump to snoop the traffic and decode it.

     

  • Try this from the command line to better replicate the monitor:

    echo -ne "GET /xyz HTTP/1.1\r\nHost: abcd\r\nConnection: Cloechse\r\n\r\n" | nc  

    /Patrik