Forum Discussion

adrien_mistrett's avatar
adrien_mistrett
Icon for Nimbostratus rankNimbostratus
Jul 21, 2005

strange values with ProfileClientSSL get_all_statitics

I've wrote a little prog to get the current ssl connection number for each ssl profile

 

 

The fourth ssl profile return really a strange value, as there in fact, between 0 an 100 connections to this ssl_profile

 

 

Here is the output of my little prog

 

 

Statistics collected 21/7/2005 15:12:21

 

anon_ssl_profile ssl current connections

 

* high : 0

 

* low : 16

 

anon_ssl_profile ssl current connections

 

* high : 0

 

* low : 0

 

anon_ssl_profile ssl current connections

 

* high : 0

 

* low : 0

 

anon_ssl_profile ssl current connections

 

* high : -1

 

* low : -39

 

anon_ssl_profile ssl current connections

 

* high : 0

 

* low : 101

 

anon_ssl_profile ssl current connections

 

* high : 0

 

* low : 71

 

 

 

Here is the Prog:!/usr/bin/python

 

 

V1.0 Adrien Mistretta

 

 

 

import sys

 

import os

 

import time

 

import SOAPpy

 

import string

 

import StringIO

 

 

User="user"

 

Pwd="password"

 

BigIp="hostname"

 

anon=1

 

statistics_list=[]

 

 

Location="https://"+User+":"+Pwd+"@"+BigIp+"/iControl/iControlPortal.cgi"

 

 

server = SOAPpy.SOAPProxy(Location, namespace = "urn:iControl:LocalLB/ProfileClientSSL")

 

 

try:

 

all_statistics=server.get_all_statistics()

 

except:

 

print "ERROR: server.get_all_statitics FAILED !!!"

 

 

statistics_list=all_statistics.statistics

 

when=all_statistics.time_stamp

 

print "Statistics collected "+str(when.day)+"/"+str(when.month)+"/"+str(when.year)+" "+str(when.hour)+":"+str(when.minute)+":"+str(when.second)

 

 

for stat in statistics_list:

 

if ( stat.profile_name != "clientssl" ):

 

name=stat.profile_name

 

for i in stat.statistics:

 

if ( i.type == "STATISTIC_SSL_COMMON_CURRENT_CONNECTIONS" ):

 

if (anon==1):

 

name="anon_ssl_profile"

 

print name+" ssl current connections"

 

print " * high : ",i.value.high

 

print " * low : ",i.value.low

 

 

 

  • Loc_Pham_101863's avatar
    Loc_Pham_101863
    Historic F5 Account
    What does the particular client SSL profile that reports "bogus" stats look like? From your snippet of code, it doesn't look like it's one of our default profiles, so if you can provide an example of your profile configuration as well of the virtual server using this profile, we'll see if we can reproduce the error condition here.

     

     

    Regards,

     

    Loc
  • hello, here is the conf

     

     

    profile clientssl mysslcert {

     

    defaults from clientssl

     

    key "blah.key"

     

    cert "blah.crt"

     

    chain "intermediate-ca.crt"

     

    }

     

    profile http mail-http {

     

    defaults from http

     

    oneconnect transformations disable

     

    header insert "X-ProxySSL-For: [IP::client_addr]"

     

    }

     

    pool mail-http {

     

    lb method member least conn

     

    monitor all http

     

    member 172.16.0.45:http

     

    member 172.16.0.46:http

     

    member 172.16.0.47:http

     

    }

     

    virtual https-service {

     

    destination 10.0.0.10:https

     

    snat automap

     

    ip protocol tcp

     

    profile mail-http oneconnect mysslcert tcp

     

    persist ssl

     

    pool mail-http

     

    vlans cs enable

     

    }

     

  • hello,

     

     

    I got some news about this problem, values are ok after a reboot of the bigip, but start to be inconsistent after a few days of uptime.

     

    It look like a memory corruption, or something like that.

     

     

    Adrien