Forum Discussion

AlexS_yb's avatar
AlexS_yb
Icon for Cirrocumulus rankCirrocumulus
Jul 22, 2022

What irule event captures http::respond or 503 generated by the F5

Hi   I use irules to log requests and responses problem is http::response and actions done by the F5 are not captured.   I have irule at  HTTP_RESPONSE_RELEASE and HTTP_RESPONSE   Neither fire...
LTM
security
  • PeteWhite's avatar
    PeteWhite
    Jul 28, 2022

    If, for instance, there is an iRule which sends a response in the HTTP_REQUEST event then this will not fire the HTTP_RESPONSE event as you say ( because that fires for serverside responses ).

    I don't know how to get around this other than to use the HTTP::has_responded command https://clouddocs.f5.com/api/irules/HTTP__has_responded.html and create a log if a response has been sent. 

PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee

If, for instance, there is an iRule which sends a response in the HTTP_REQUEST event then this will not fire the HTTP_RESPONSE event as you say ( because that fires for serverside responses ).

I don't know how to get around this other than to use the HTTP::has_responded command https://clouddocs.f5.com/api/irules/HTTP__has_responded.html and create a log if a response has been sent. 

AlexS_yb's avatar
AlexS_yb
Icon for Cirrocumulus rankCirrocumulus
Jul 28, 2022

Actually thats a pretty good way of doing it set priority really low and pick it up that way.

Hadn't thought of that.

 

I think its a bug, that it doesn't fire the other events.