Forum Discussion
Chetan_Puri_368
Nimbostratus
Mar 01, 2019SSL information wants to see on server
hi team,
can someone help me for the Irule, client wants to see user SSL detail on server. when user try for Https connection for website (User --> F5 --> Server)
Michael_Saleem1
Cirrus
Mar 01, 2019You could make use of High Speed Logging (HSL) to send SSL connection information to a syslog server
1) Create a pool containing the syslog server
tmsh create ltm pool HSL-POOL-514 members add { :514 }
2) Create an iRule which uses HSL to send SSL connection information to a syslog server
when CLIENT_ACCEPTED {
set hsl [HSL::open -proto UDP -pool HSL-POOL-514]
}
when HTTP_REQUEST {
set HOST [HTTP::host]
set METHOD [HTTP::method]
set URI [HTTP::uri]
set HTTP_VERSION [HTTP::version]
}
when CLIENTSSL_HANDSHAKE {
set SSL_VERSION [SSL::cipher version]
set SSL_CIPHER [SSL::cipher name]
}
when HTTP_RESPONSE {
HSL::send $hsl "<190> SSL Version: $SSL_VERSION, SSL Cipher: $SSL_CIPHER, Source: [IP::client_addr]:[TCP::client_port], Destination: [clientside {IP::local_addr}]:[clientside {TCP::local_port}], Pool Member: [IP::server_addr]:[TCP::server_port], Host: $HOST, $METHOD $URI HTTP/$HTTP_VERSION, Status: [HTTP::status]"
}
An example of a log line you will see:
11-13-2017 21:47:38 Local7.Info 192.168.1.252 SSL Version: TLSv1.2, SSL Cipher: DHE-RSA-AES256-GCM-SHA384, Source: 192.168.1.124:45886, Destination: 192.168.1.100:443, Pool Member: 172.24.32.11:80, Host: www.example.com, GET /index.html HTTP/1.1, Status: 200Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects