Forum Discussion

Jason_Keating's avatar
Jason_Keating
Icon for Altostratus rankAltostratus
Nov 25, 2012

SSL_renegotiation_DOS_mitigation

Hi,     I've been looking at this https://devcentral.f5.com/wiki/iRules.Print.aspx?Page=iRules.SSL_renegotiation_DOS_mitigation   I am confused by the iRule, where and when is hs_count ini...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Nov 25, 2012
i got the same error on both v10 and v11.

i think hs_count should be initialized in CLIENT_ACCEPTED. 

 11.2.1

[root@ve11a:Active:Changes Pending] config  tmsh show sys version

Sys::Version
Main Package
  Product  BIG-IP
  Version  11.2.1
  Build    797.0
  Edition  Final
  Date     Thu Sep 20 09:35:47 PDT 2012

[root@ve11a:Active:Changes Pending] config  tail -f /var/log/ltm
Nov 26 13:36:08 tmm err tmm[6316]: 01220001:3: TCL error: /Common/myrule  - can't read "hs_count": no such variable     (reading value of variable to increment)     invoked from within "incr hs_count"
Nov 26 13:36:08 tmm err tmm[6316]: 01220001:3: TCL error: /Common/myrule  - can't read "hs_count": no such variable     while executing "for { set i 1 } { $i <= $hs_count } { incr i } {               table delete -subtable "hs_rate:$flow" "[TCP::client_port]:$i"         }"

 10.2.4

[root@ve10:Active] config  b version|grep -iA 1 version
BIG-IP Version 10.2.4 655.0
Hotfix HF4 Edition

[root@ve10:Active] config  tail -f /var/log/ltm
Nov 26 13:41:59 local/tmm err tmm[7926]: 01220001:3: TCL error: myrule  - can't read "hs_count": no such variable     (reading value of variable to increment)     invoked from within "incr hs_count"
Nov 26 13:41:59 local/tmm err tmm[7926]: 01220001:3: TCL error: myrule  - can't read "hs_count": no such variable     while executing "for { set i 1 } { $i <= $hs_count } { incr i } {     table delete -subtable "hs_rate:$flow" "[TCP::client_port]:$i"   }"