For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

andrew_hui's avatar
andrew_hui
Icon for Nimbostratus rankNimbostratus
Oct 05, 2015

Trying to log HTTPS explicit proxy

So I am using Brett Smith's explicit proxy iApp, and trying to log traffic going through the VS created using the following iRule when HTTP_REQUEST { log local0.info "HTTP::method: [HTT...
application delivery
devops
iApps
iRules
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Oct 05, 2015

Hello,

This iRule is suitable for both - HTTP as well as for HTTPS. The criteria for use is that in case of HTTPS, F5 has to decrypt clientside traffic flow so that the HTTP headers can be inspected. It does not matter if you attach this particular iRule to a HTTP or HTTPS Virtual Server, but in case of HTTPS you must also assign a clientssl profile.

There are no workarounds here, two functions in your iRule require that the clientside traffic flow must be decrypted: 

[HTTP::method]
and 
[HTTP::request]
. The 
[IP::client_addr]
function is the only one which can be used in case of encrypted traffic flow.