Need to write Irule to decode auth string to Base64 and fetch domain name from it and compare that domain name with certificate to deny/permit traffic

Hi Amit,

did you try to replace HTTP event and commands from Kevin irule by TCP one.

You can also get the requested TLS server name instead of cert used.

when CLIENT_ACCEPTED {
    TCP::collect
}
when CLIENTSSL_CLIENTHELLO {

    if { [SSL::extensions exists -type 0] } {
         if the servername exists - store it in tls_servername variable
        set tls_servername [string range [SSL::extensions -type 0] 9 [string length [SSL::extensions -type 0]]]
    }
}
when CLIENT_DATA {
     HTTP payload data is available here
    set authStr [findstr [TCP::payload] ""]
    if { $authStr ne "" } {
        set domain [findstr $authStr "mechanism='EXTERNAL'>" 21 end]
        catch { set domain [b64decode $domain] } 
        log local0. "domain = $domain"
    }
    TCP::release
}