strange values with ProfileClientSSL get_all_statitics

Question

I've wrote a little prog to get the current ssl connection number for each ssl profile&nbsp;
&nbsp;The fourth ssl profile return really a strange value, as there in fact, between 0 an 100 connections to this ssl_profile&nbsp;
&nbsp;Here is the output of my little prog&nbsp;
&nbsp;Statistics collected 21/7/2005 15:12:21
&nbsp;anon_ssl_profile ssl current connections
&nbsp;      * high :  0
&nbsp;      * low  :  16
&nbsp;anon_ssl_profile ssl current connections
&nbsp;      * high :  0
&nbsp;      * low  :  0
&nbsp;anon_ssl_profile ssl current connections
&nbsp;      * high :  0
&nbsp;      * low  :  0
&nbsp;anon_ssl_profile ssl current connections
&nbsp;      * high :  -1
&nbsp;      * low  :  -39
&nbsp;anon_ssl_profile ssl current connections
&nbsp;      * high :  0
&nbsp;      * low  :  101
&nbsp;anon_ssl_profile ssl current connections
&nbsp;      * high :  0
&nbsp;      * low  :  71&nbsp;&nbsp;
&nbsp;Here is the Prog:!/usr/bin/python&nbsp;
&nbsp; V1.0 Adrien Mistretta&nbsp;&nbsp;
&nbsp;import sys
&nbsp;import os
&nbsp;import time
&nbsp;import SOAPpy
&nbsp;import string
&nbsp;import StringIO&nbsp;
&nbsp;User="user"
&nbsp;Pwd="password"
&nbsp;BigIp="hostname"
&nbsp;anon=1
&nbsp;statistics_list=[]&nbsp;
&nbsp;Location="https://"+User+":"+Pwd+"@"+BigIp+"/iControl/iControlPortal.cgi"&nbsp;
&nbsp;server = SOAPpy.SOAPProxy(Location, namespace = "urn:iControl:LocalLB/ProfileClientSSL")&nbsp;
&nbsp;try:
&nbsp;        all_statistics=server.get_all_statistics()
&nbsp;except:
&nbsp;        print "ERROR: server.get_all_statitics FAILED !!!"&nbsp;
&nbsp;statistics_list=all_statistics.statistics
&nbsp;when=all_statistics.time_stamp
&nbsp;print "Statistics collected "+str(when.day)+"/"+str(when.month)+"/"+str(when.year)+" "+str(when.hour)+":"+str(when.minute)+":"+str(when.second)&nbsp;
&nbsp;for stat in statistics_list:
&nbsp;        if ( stat.profile_name != "clientssl" ):
&nbsp;                name=stat.profile_name
&nbsp;                for i in stat.statistics:
&nbsp;                        if ( i.type == "STATISTIC_SSL_COMMON_CURRENT_CONNECTIONS" ):
&nbsp;                                if (anon==1):
&nbsp;                                        name="anon_ssl_profile"
&nbsp;                                print name+" ssl current connections"
&nbsp;                                print "      * high : ",i.value.high
&nbsp;                                print "      * low  : ",i.value.low&nbsp;&nbsp;&nbsp;

loc_pham_101863 · Answer

What does the particular client SSL profile that reports "bogus" stats look like?  From your snippet of code, it doesn't look like it's one of our default profiles, so if you can provide an example of your profile configuration as well of the virtual server using this profile, we'll see if we can reproduce the error condition here.&nbsp;
&nbsp;Regards,
&nbsp;Loc

adrien_mistrett · Answer

hello, here is the conf&nbsp;
&nbsp;profile clientssl mysslcert {
&nbsp;   defaults from clientssl
&nbsp;   key "blah.key"
&nbsp;   cert "blah.crt"
&nbsp;   chain "intermediate-ca.crt"
&nbsp;}
&nbsp;profile http mail-http {
&nbsp;   defaults from http
&nbsp;   oneconnect transformations disable
&nbsp;   header insert "X-ProxySSL-For: [IP::client_addr]"
&nbsp;}
&nbsp;pool mail-http {
&nbsp;   lb method member least conn
&nbsp;   monitor all http
&nbsp;   member 172.16.0.45:http
&nbsp;   member 172.16.0.46:http
&nbsp;   member 172.16.0.47:http
&nbsp;}
&nbsp;virtual https-service {
&nbsp;   destination 10.0.0.10:https
&nbsp;   snat automap
&nbsp;   ip protocol tcp
&nbsp;   profile mail-http oneconnect mysslcert tcp
&nbsp;   persist ssl
&nbsp;   pool mail-http
&nbsp;   vlans cs enable
&nbsp;}&nbsp;

adrien_mistrett · Answer

hello,&nbsp;
&nbsp;I got some news about this problem, values are ok after a reboot of the bigip, but start to be inconsistent after a few days of uptime.
&nbsp;It look like a memory corruption, or something like that.&nbsp;
&nbsp;Adrien

Forum Discussion

AppWorld Berlin iRules Contest!

F5 AppWorld 2026 Las Vegas - iRules Contest Winners!

Recent Discussions

Changes to DO and AS3 GitHub - no longer monitored

How to Verify config before loading to F5

Logical Disk Full to Migrate rSeries

HSL - Local TimeZone - in syslog server

VIP control across data centers - how to ensure only 1 VIP is up at a time?

Related Content

Strange Problem- F5 APM

F5 last reboot strange issue

Removing A Strange HTTP Header with iRules

Strange phenomenon seen in the tcpdump

non-existent vlan strange although vlan is present