Forum Discussion
Kharsma_176894
Nimbostratus
Nimbostratususing iRules to figure out how many SSLv3 connections
Hey everyone,
I am working on trying to get rid of SSLv3, but have a lot of legacy clients/apps that may not support TLS yet. I came across an iRule that I tweaked in a way that I thought might...
If you are just trying to gather general metrics about SSL/TLS (and not client IP addresses), there are a wealth of statistics available via iControl:
https://devcentral.f5.com/wiki/iControl.System__Statistics__get_client_ssl_statistics.ashx
Specifically, "Common::STATISTIC_SSL_PROTOCOL_SSLV3".
Good luck,
-M
mhite_60883
Cirrocumulus
CirrocumulusIf you are just trying to gather general metrics about SSL/TLS (and not client IP addresses), there are a wealth of statistics available via iControl:
https://devcentral.f5.com/wiki/iControl.System__Statistics__get_client_ssl_statistics.ashx
Specifically, "Common::STATISTIC_SSL_PROTOCOL_SSLV3".
Good luck,
-M
- shaggyyou can also use: tmsh show ltm profile client-ssl (profile-name) it includes stats similar to: Protocol SSL Protocol Version 2 0 SSL Protocol Version 3 2.4K TLS Protocol Version 1.0 1.1M TLS Protocol Version 1.1 337.8K TLS Protocol Version 1.2 2.6M DTLS Protocol Version 1 0