For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ottleydamian's avatar
ottleydamian
Icon for Cirrus rankCirrus
Mar 03, 2019
Solved

TCP iRule to find HTTP headers

I have a situation where I have an iRule that works once the user is using the HTTP protocol. Unfortunately, the same VIP handles a proprietary protocol from Oracle called T3. To use the iRule I need...
application delivery
iRules
LTM
  • Niels_van_Sluis's avatar
    Niels_van_Sluis
    Mar 03, 2019

    I think you could limit the iRule to this:

    when CLIENT_ACCEPTED {
    HTTP::disable
    TCP::collect 4
}

when CLIENT_DATA {
    if { [TCP::payload 4] contains "GET" } {
        HTTP::enable
    }
    TCP::release
}

when HTTP_REQUEST {
    my irule
}

when HTTP_RESPONSE {
    my irule
}

    I'll expect the HTTP_REQUEST and HTTP_RESPONSE events will not be triggered when the HTTP profile is disabled.

ottleydamian's avatar
ottleydamian
Icon for Cirrus rankCirrus
Mar 03, 2019

My first thoughts are something like this: (the HTTP profile will be configured on the VIP)

 

` when CLIENT_ACCEPTED { TCP::collect 4 } `

 

` when CLIENT_DATA { if { ([TCP::payload 4] contains "GET") || ([TCP::payload 4] contains "POST") } { HTTP::enable How to add the iRule??? } else { HTTP::disable How to remove the iRule??? } TCP::release } `