Forum Discussion

James_Yang_9981's avatar
James_Yang_9981
Icon for Altostratus rankAltostratus
Apr 13, 2007

Why a "standard" irules can't work?

BIGIP 6400 with 9.4 installed

I need using irule to parse the client cert and insert it into http header. and I'm using a very simple rule for test:


when CLIENTSSL_CLIENTCERT {
  session add uie [SSL::sessionid] [SSL::cert 0] 180
}
when HTTP_REQUEST {
  set the_cert [session lookup uie [SSL::sessionid]]
}

but I got following log output:


Apr 14 03:26:14 tmm tmm[1458]: 01220001:3: TCL error: Rule irules_www_https  - Prerequisite operation not in progress (line 2)     invoked from within "session add uie [SSL::sessionid] [SSL::cert 0] 180"
Apr 14 03:26:14 tmm tmm[1458]: 01220001:3: TCL error: Rule irules_www_https  - Prerequisite operation not in progress (line 1)     invoked from within "session lookup uie [SSL::sessionid]"

if I remove the rule, the whole VS will work perfectly. and this only happen on BIGIP 9.4 on a pair of 6400, I test the same rule in a 9.4 on another 3400 will work perfectly. also, 9.1.2 will work.

does I missed any part?

application delivery
dev
devops
iRules
  • James_Yang_9981's avatar
    James_Yang_9981
    Icon for Altostratus rankAltostratus
    Apr 14, 2007
    Have answer yet.

     

    the rule need a default pool behind it. if no default pool. it will not work. because I used http class to direct traffic to diffrent pool. so there are no default pool associated with the VS, after add a default pool to VS, the rules works.

     

     

    but, still don't know why it comes.