Forum Discussion

chethan_181144's avatar
chethan_181144
Icon for Nimbostratus rankNimbostratus
Mar 12, 2019

Why we need SSLCIPHER irule ?

Hi Team ,

 

Can you please help me understand the use of below sslcipher irule which is applied to 443 vip .How this will work ?

 

ltm rule SSLCIPHER {

 

when HTTP_REQUEST {

 

HTTP::header insert SSLClientCipher [SSL::cipher name],\x20version=[SSL::cipher version],\x20bits=[SSL::cipher bits]

 

}

 

}

 

1 Reply

  • The F5 will insert a new HTTP Header to the back end node. You should see in the packet:

     

    SSLClientCipher EDH-RSA-DES-CBC3-SHA, version=TLS1.2|TLS1.1|TLS1.0|SSLv3, bits=256|128|40

     

    You can use this info to analyse what your clients are using to connect in via your webserver logs.(Assuming you parse and log that http header in your w3c logs)