Forum Discussion
Kharsma_176894
Nimbostratus
Nimbostratususing iRules to figure out how many SSLv3 connections
Hey everyone,
I am working on trying to get rid of SSLv3, but have a lot of legacy clients/apps that may not support TLS yet. I came across an iRule that I tweaked in a way that I thought might...
If you are just trying to gather general metrics about SSL/TLS (and not client IP addresses), there are a wealth of statistics available via iControl:
https://devcentral.f5.com/wiki/iControl.System__Statistics__get_client_ssl_statistics.ashx
Specifically, "Common::STATISTIC_SSL_PROTOCOL_SSLV3".
Good luck,
-M
mhite_60883
Cirrocumulus
CirrocumulusIf you are just trying to gather general metrics about SSL/TLS (and not client IP addresses), there are a wealth of statistics available via iControl:
https://devcentral.f5.com/wiki/iControl.System__Statistics__get_client_ssl_statistics.ashx
Specifically, "Common::STATISTIC_SSL_PROTOCOL_SSLV3".
Good luck,
-M
shaggyNimbostratus
Nimbostratusyou can also use:
tmsh show ltm profile client-ssl (profile-name)
it includes stats similar to:
Protocol
SSL Protocol Version 2 0
SSL Protocol Version 3 2.4K
TLS Protocol Version 1.0 1.1M
TLS Protocol Version 1.1 337.8K
TLS Protocol Version 1.2 2.6M
DTLS Protocol Version 1 0