For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Fabio_Sozzi_308's avatar
Fabio_Sozzi_308
Icon for Nimbostratus rankNimbostratus
Jul 22, 2014

Use stream profile for APM logon page

Hi, i would to use a stream profile with iRules for find/replace a string into APM logon page. I've tried to use ACCESS_ACL_ALLOWED event or HTTP_RESPONSE but don't work. Can i use stream profile or other method for replace a string into APM logon page??

 

Thanks in advance. Regards, Fabio

 

1 Reply

  • Have you tried to find this value in the customization section? I don't know of any string values in the logon page that aren't customizable. In any case, the HTTP_RESPONSE event in the server side context and is triggered when a response is received from the server. The ACCESS_ACL_ALLOWED event is in the client side context and is triggered on an HTTP request, but only after the policy is complete. In order to programmatically replace anything in an APM dialog, you'd necessarily need to layer an LTM VIP and iRule in front of the APM VIP. The iRule might look something like this:

    when HTTP_REQUEST {
         remove ingress Accept-Encoding header so that server does not compress the response
        HTTP::header remove Accept-Encoding
    
         disable STREAM for the request
        STREAM::disable
    
         send the traffic to the internal APM VIP
        virtual internal_apm_vs
    }
    when HTTP_RESPONSE {
        if { [HTTP::header Content-Type] contains "text" } {
            STREAM::expression {@find@replace@}
            STREAM::enable
        }
    }