For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Albert__Tase_70's avatar
Albert__Tase_70
Icon for Nimbostratus rankNimbostratus
Apr 27, 2007

need help with Irule redirect and persistance

hello I have the following irule applied:

 

when HTTP_REQUEST {

 

if { [HTTP::uri] contains "BookStore/SecureCheckOut.do" } {

 

[HTTP::redirect https://[HTTP::host][HTTP::uri]]

 

} else {

 

use pool bookstore_10.254.243.41_80

 

}}

 

to vip 170.224.107.69_80

 

the issue is it works but if you open multiple sessions to the same 170.224.107.69 and login persistance may be still breaking on the third try get page time out and a error rst according to http watch and also they are saying that they are reciveing seesion timeouts I have been unable to reproduce the session timeouts so far but because an Irule is involed support sends me here below is a the out put I have from http watch any suggestions on how to determin if its the f5 or the server sending the rst would be helpfull.

 

00:00:00.0000.145684240GET304text/htmlhttp://170.224.107.69/

 

00:00:01.2191.67064256267GET200text/html;charset=UTF-8http://170.224.107.69/BookStore/pagedisplay.do?genre=book&pub=macaus

 

00:00:02.1050.160660240GET304text/csshttp://170.224.107.69/BookStore/stylesheets/style.css

 

00:00:02.1080.241658121GET304text/csshttp://170.224.107.69/BookStore/stylesheets/tab.css

 

00:00:02.1100.324654121GET304text/javascripthttp://170.224.107.69/BookStore/scripts/tree.js

 

00:00:02.4570.084658121GET304text/javascripthttp://170.224.107.69/BookStore/scripts/bookList.js

 

00:00:02.5560.084665121GET304text/javascripthttp://170.224.107.69/BookStore/scripts/bookstoreCommon.js

 

00:00:02.6530.098655121GET304text/javascripthttp://170.224.107.69/BookStore/scripts/header.js

 

00:00:02.6580.2695754203GET200image/jpeg;charset=ISO-8859-1http://170.224.107.69/BookStore/leftHeaderLogoDisplay.jsp

 

00:00:02.6580.312657121GET304image/gifhttp://170.224.107.69/BookStore/images/collapse.gif

 

00:00:02.6590.353655121GET304image/gifhttp://170.224.107.69/BookStore/images/expand.gif

 

00:00:02.6600.394653121GET304image/gifhttp://170.224.107.69/BookStore/images/arrow.gif

 

00:00:02.6600.6016118442GET200image/jpg;charset=ISO-8859-1http://170.224.107.69/BookStore/bookListImageDisplay.jsp?pub=macaus/mea/&bookid=9781420224887

 

00:00:02.6680.929654121GET304image/gifhttp://170.224.107.69/BookStore/images/v_line.gif

 

00:00:02.6710.5966149104GET200image/jpg;charset=ISO-8859-1http://170.224.107.69/BookStore/bookListImageDisplay.jsp?pub=macaus/panaus/&bookid=9781741976717

 

00:00:02.6710.86661311878GET200image/jpg;charset=ISO-8859-1http://170.224.107.69/BookStore/bookListImageDisplay.jsp?pub=macaus/panuk/&bookid=9780330458627

 

00:00:02.6720.8416118555GET200image/jpg;charset=ISO-8859-1http://170.224.107.69/BookStore/bookListImageDisplay.jsp?pub=macaus/mea/&bookid=9781420224894

 

00:00:02.6720.957654121GET304image/gifhttp://170.224.107.69/BookStore/images/h_line.gif

 

00:00:02.6971.13461411947GET200image/jpg;charset=ISO-8859-1http://170.224.107.69/BookStore/bookListImageDisplay.jsp?pub=macaus/panaus/&bookid=9781741977486

 

00:00:28.9020.159766321GET302Redirect to http://170.224.107.69/BookStore/signInHome.dohttp://170.224.107.69/BookStore/forwardToUserCartHome.do?cartType=sc

 

00:00:29.0630.54974337106GET200text/html;charset=UTF-8http://170.224.107.69/BookStore/signInHome.do

 

00:00:29.1840.00100GET(Cache)text/csshttp://170.224.107.69/BookStore/stylesheets/style.css

 

00:00:29.1850.00600GET(Cache)text/csshttp://170.224.107.69/BookStore/stylesheets/tab.css

 

00:00:29.1930.00000GET(Cache)text/javascripthttp://170.224.107.69/BookStore/scripts/tree.js

 

00:00:29.1960.00000GET(Cache)text/javascripthttp://170.224.107.69/BookStore/scripts/bookList.js

 

00:00:29.1980.00000GET(Cache)text/javascripthttp://170.224.107.69/BookStore/scripts/bookstoreCommon.js

 

00:00:29.1990.00000GET(Cache)text/javascripthttp://170.224.107.69/BookStore/scripts/header.js

 

00:00:29.2000.3045524322GET200image/jpeg;charset=ISO-8859-1http://170.224.107.69/BookStore/leftHeaderLogoDisplay.jsp

 

00:00:29.5190.085637121GET304image/gifhttp://170.224.107.69/BookStore/images/signin_box1.gif

 

00:00:29.5200.171637121GET304image/gifhttp://170.224.107.69/BookStore/images/signin_box2.gif

 

00:00:29.5540.170637121GET304image/gifhttp://170.224.107.69/BookStore/images/signin_box3.gif

 

00:00:29.5570.224643121GET304image/gifhttp://170.224.107.69/BookStore/images/signin_box3_green.gif

 

00:00:29.5590.254643121GET304image/gifhttp://170.224.107.69/BookStore/images/signin_box1_green.gif

 

00:00:29.5600.311643121GET304image/gifhttp://170.224.107.69/BookStore/images/signin_box2_green.gif

 

00:00:57.1910.244881344POST302Redirect to http://170.224.107.69/BookStore/forwardToUserCartHome.do?cartType=schttp://170.224.107.69/BookStore/authenticate

 

00:00:57.4391.71276863272GET200text/html;charset=UTF-8http://170.224.107.69/BookStore/forwardToUserCartHome.do?cartType=sc

 

00:00:58.4740.00100GET(Cache)text/csshttp://170.224.107.69/BookStore/stylesheets/style.css

 

00:00:58.4760.00000GET(Cache)text/csshttp://170.224.107.69/BookStore/stylesheets/tab.css

 

00:00:58.4810.00000GET(Cache)text/javascripthttp://170.224.107.69/BookStore/scripts/tree.js

 

00:00:58.4870.00000GET(Cache)text/javascripthttp://170.224.107.69/BookStore/scripts/bookList.js

 

00:00:58.4890.00000GET(Cache)text/javascripthttp://170.224.107.69/BookStore/scripts/bookstoreCommon.js

 

00:00:58.4900.00000GET(Cache)text/javascripthttp://170.224.107.69/BookStore/scripts/header.js

 

00:00:58.4940.3155754322GET200image/jpeg;charset=ISO-8859-1http://170.224.107.69/BookStore/leftHeaderLogoDisplay.jsp

 

00:00:58.7900.106668121GET304text/javascripthttp://170.224.107.69/BookStore/scripts/multiSelectCheckbox.js

 

00:00:58.9020.00400GET(Cache)image/gifhttp://170.224.107.69/BookStore/images/adobereader.gif

 

00:00:58.9030.00400GET(Cache)image/gifhttp://170.224.107.69/BookStore/images/msreader.gif

 

00:00:58.9110.00100GET(Cache)image/gifhttp://170.224.107.69/BookStore/images/mobipocket.gif

 

00:01:12.1140.1601221346POST302Redirect to http://170.224.107.69/BookStore/SecureCheckOut.dohttp://170.224.107.69/BookStore/shoppingCart.do

 

00:01:12.2750.3307720GETERROR_INTERNET_CONNECTION_RESET*http://170.224.107.69/BookStore/SecureCheckOut.do

 

 

application delivery
dev
devops
iRules

3 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Apr 27, 2007
    So it looks like you want to redirect clients who make a request to http://170.224.107.69/BookStore/SecureCheckOut.do to the same URL via HTTPS. And it seems like everything works up to the point where the client makes a request to that URL via HTTP?

    I think the problem is that you've enclosed the HTTP::redirect command in []'s, so the return value is being executed:

    
[HTTP::redirect https://[HTTP::host][HTTP::uri]]

    Can you remove the outer braces and retest?

    
HTTP::redirect https://[HTTP::host][HTTP::uri]

    I would expect you'd find an error logged in /var/log/ltm. It is the log file iRule events are logged to by default (/var/log/ltm). You can view it via the GUI under System | Logs | Local Traffic, or by opening the file via the command line (less /var/log/ltm or tail -f /var/log/ltm).

    Aaron
  • Albert__Tase_70's avatar
    Albert__Tase_70
    Icon for Nimbostratus rankNimbostratus
    Apr 30, 2007
    under the system logs do not see and errors the irule options under logging are set to informational due I need to raise that to debug in order to see what your descrbing in the logs

     

    I will remove the brackets but it works most of the time with the brackets in place just trying to understand what effect the brackets could be having ?

     

     

     

     

    thanks

     

     

     

    AL Tase
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Apr 30, 2007
    With the extra brackets, TMM tries to execute the return value of the redirect. When using the extra brackets, I see the following error in the /var/log/ltm file:

     

     

    Apr 30 14:36:35 tmm tmm[1074]: 01220001:3: TCL error: Rule test_rule - invalid command name "" while executing "[HTTP::redirect https://[HTTP::host][HTTP::uri]]"

     

     

    If I remove the outer braces, no error is generated.

     

     

    Can you try viewing the ltm log file on the command line using 'less /var/log/ltm' or copy the file off the BIG-IP using WinSCP and then use a Windows text editor to view the log?

     

     

    Aaron