Forum Discussion

Remco's avatar
Remco
Icon for Nimbostratus rankNimbostratus
Nov 03, 2011

Redirecting http request to external url via proxy

Hi,     we are using F5 load balancers for our Internet environment. There is now a requirement during customer login to download a trojan detection script at an external company. But for the cl...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Nov 08, 2011
when browsing https://172.28.65.152/ 

New TCP connection 3: 192.168.206.102(56162) <-> 172.28.65.152(443)
3 1  1320730108.5769 (0.0018)  C>SV3.1(139)  Handshake
      ClientHello
        Version 3.1
        random[32]=
          4e b8 bf 18 c1 41 57 a1 b6 fb 79 25 ba b0 e3 20
          17 76 59 49 ec 4d 6f 15 d5 57 12 6d 11 ac e2 75
        cipher suites
        Unknown value 0xff
        Unknown value 0xc00a
        Unknown value 0xc014
        Unknown value 0x88
        Unknown value 0x87
        TLS_DHE_DSS_WITH_AES_256_CBC_SHA
        Unknown value 0xc00f
        Unknown value 0xc005
        Unknown value 0x84
        TLS_RSA_WITH_AES_256_CBC_SHA
        TLS_DHE_RSA_WITH_AES_256_CBC_SHA
        Unknown value 0xc007
        Unknown value 0xc009
        Unknown value 0xc011
        Unknown value 0xc013
        Unknown value 0x45
        Unknown value 0x44
        TLS_DHE_RSA_WITH_AES_128_CBC_SHA
        TLS_DHE_DSS_WITH_AES_128_CBC_SHA
        Unknown value 0xc00c
        Unknown value 0xc00e
        Unknown value 0xc002
        Unknown value 0xc004
        Unknown value 0x96
        Unknown value 0x41
        TLS_RSA_WITH_RC4_128_MD5
        TLS_RSA_WITH_RC4_128_SHA
        TLS_RSA_WITH_AES_128_CBC_SHA
        Unknown value 0xc008
        Unknown value 0xc012
        TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
        TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
        Unknown value 0xc00d
        Unknown value 0xc003
        Unknown value 0xfeff
        TLS_RSA_WITH_3DES_EDE_CBC_SHA
        compression methods
                  NULL
3 2  1320730108.5770 (0.0000)  S>CV3.1(81)  Handshake
      ServerHello
        Version 3.1
        random[32]=
          89 cd 97 a7 2e 9e bb d1 41 d6 69 e0 6e e6 c2 a6
          b5 a4 20 98 09 77 72 6a d4 5d 85 a9 00 b9 d6 27
        session_id[32]=
          2c c8 08 e2 44 02 e7 31 cc 99 4a 19 79 ff e8 7e
          f3 6f 94 34 b3 03 1a bb 69 92 a4 a6 e0 4b 04 0d
        cipherSuite         TLS_RSA_WITH_RC4_128_SHA
        compressionMethod                   NULL
3 3  1320730108.5770 (0.0000)  S>CV3.1(692)  Handshake
      Certificate
3 4  1320730108.5770 (0.0000)  S>CV3.1(4)  Handshake
      ServerHelloDone
3 5  1320730108.5800 (0.0030)  C>SV3.1(134)  Handshake
      ClientKeyExchange
        EncryptedPreMasterSecret[128]=
          2f 64 7c 19 00 a8 44 c9 4e 77 a0 29 a0 35 d4 1e
          b4 a6 44 a7 38 6b 80 16 ae 8c 57 d1 72 df 4f b7
          ef 1d bb 8a 7d 96 96 d0 d3 c0 ce 6c 97 5e 89 fd
          3f ec e2 51 aa 45 6f 3a 90 a7 99 c5 d3 15 d1 cd
          d7 27 eb 12 e3 c1 1c a2 6c bf 48 f4 3f 2e 1c 42
          89 1a 01 66 00 74 10 cd 1f 5a d4 4f 21 2a d8 dc
          4b e2 57 d8 55 61 4f 6d 9d 00 cd 8f 6d ca 94 21
          42 0f fd 58 13 1f 28 6e aa e9 ee 5e 15 b7 f2 2b
3 6  1320730108.5800 (0.0000)  C>SV3.1(1)  ChangeCipherSpec
3 7  1320730108.5800 (0.0000)  C>SV3.1(36)  Handshake
      Finished
        verify_data[12]=
          9e f7 0a bb 6f d4 b0 82 48 b2 67 44

3 8  1320730108.5830 (0.0030)  S>CV3.1(1)  ChangeCipherSpec
3 9  1320730108.5830 (0.0000)  S>CV3.1(36)  Handshake
      Finished
        verify_data[12]=
          f7 0f f3 da 64 40 42 19 6e 0f a0 6f

3 10 1320730108.5882 (0.0051)  C>SV3.1(389)  application_data
    ---------------------------------------------------------------
    GET / HTTP/1.1
    Host: 172.28.65.152
    User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.23) Gecko/20110920 Firefox/3.6.23
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    Accept-Language: en-us,en;q=0.5
    Accept-Encoding: gzip,deflate
    Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
    Keep-Alive: 115
    Connection: keep-alive

    ---------------------------------------------------------------
New TCP connection 4: 200.200.200.1(56162) <-> 200.200.200.101(80)
1320730108.5890 (0.0007)  C>S
---------------------------------------------------------------
GET / HTTP/1.1
Host: 172.28.65.152
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.23) Gecko/20110920 Firefox/3.6.23
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

---------------------------------------------------------------

1320730108.5922 (0.0032)  S>C
---------------------------------------------------------------
HTTP/1.1 200 OK
Date: Tue, 08 Nov 2011 05:33:11 GMT
Server: Apache/2.2.3 (CentOS)
Last-Modified: Mon, 07 Nov 2011 11:52:31 GMT
ETag: "4183e3-2a-b08f5dc0"
Accept-Ranges: bytes
Content-Length: 42
Connection: close
Content-Type: text/html; charset=UTF-8



Hello world


---------------------------------------------------------------

3 11 1320730108.5923 (0.0040)  S>CV3.1(324)  application_data
    ---------------------------------------------------------------
    HTTP/1.1 200 OK
    Date: Tue, 08 Nov 2011 05:33:11 GMT
    Server: Apache/2.2.3 (CentOS)
    Last-Modified: Mon, 07 Nov 2011 11:52:31 GMT
    ETag: "4183e3-2a-b08f5dc0"
    Accept-Ranges: bytes
    Content-Length: 42
    Connection: close
    Content-Type: text/html; charset=UTF-8

    
    
    Hello world
    
    
    ---------------------------------------------------------------
4    1320730108.5923 (0.0000)  S>C  TCP FIN
3    1320730108.5923 (0.0000)  S>C  TCP FIN