Forum Discussion
Request for command examples: 'listen', 'relate_client', 'relate_server'
I have written an iRule to transparently handle implicit and explicit FTPS termination. I've posted the rule to http://devcentral.f5.com/wiki/defau...ation.html . It has just a couple minor issues left to iron out, but is otherwise working fine. However, I'd really like to get rid of the pasv port tracking mechanism I've created. I think I might be reinventing the wheel there.
From what I can tell, the 'TCP::unused_port' and 'listen' commands, along with potentially the 'relate_client' and/or 'relate_server' commands could be used to instruct the F5 to listen on an unused port for an incoming pasv connection related to the control channel connection. This would eliminate a whole swath of TCL global array lookups as well as the TCL IP ACLs I've created. I could get rid of my reinvented wheel, so to say.
That said, I can't determine how to properly use the 'listen' or 'relate_client'/'relate_server' commands and the wiki entries are a bit vague. I've attempted some trial and error here, but have been unsuccessful. Can anyone shed some light on how these are used? I've searched high and low for examples but haven't found any. I'd really love to clean up that FTPS iRule and remove my ad hoc port management. I think there might be others who could benefit from this iRule if I could get it in tip-top shape. Thanks!
2 Replies
- hoolio
Cirrostratus
Hi Bob,
Thanks for adding the FTPS iRule. It looks like a great start.
Unfortunately, these aren't commands I've explored much. You could open a case with F5 Support and ask them to elaborate on the wiki pages for the commands. The more specific info you can suggest they provide, the better response you'll get.
Aaron - Gary_Shah_55283
Nimbostratus
I have added Bob Z's iRule to current FTPS install - but, can't get it to work.
I was leaning towards single iRule solution for FTPS as opposed to 3 VS and 3 iRule solution published on this forum earlier.
If anyone else has ventured to put this in testing ... please post your feedback.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
