For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rick_Nyman's avatar
Rick_Nyman
Icon for Nimbostratus rankNimbostratus
May 23, 2009

XMPP with STARTTLS

I love the simplicity of SSL offload using standard SSL/TLS. Unfortunately, I've recently been given a requirement to do XMPP (an Instant Messaging protocol) using STARTTLS.     I found ...
application delivery
dev
devops
iRules
RavishAgg_20266's avatar
RavishAgg_20266
Icon for Nimbostratus rankNimbostratus
May 18, 2015

Hi All,

 

I am trying to integrate F5 between XMPP server (like openfire,CISCO) and Our XMPP Module( that act as xmpp server). currently Our module is doing the TLS +SASL with XMPP servers. now we need to delegate the TLS part towards F5.

 

could someone help in providing the information that what irules we need to create for this? Like In XMPP , befor TLS negotiation, streams and features(like starttls) exchanged between client and server, so does this will need to be handled at F5 level , or Our module will handle the same, and only TLS ( certificate exchange) part will be delegated to F5. I am new to TCL language.

 

How would i apply this code to my scenario. Please let me know if you need more information. Thanks in advance.

 

Regards,

 

Ravish Aggarwal

 

  • brice's avatar
    brice
    Icon for Nimbostratus rankNimbostratus
    Nov 28, 2016

    Just wanted to update this thread due to some changes in TCP::collect in v11. This actually caused a production issue on a very highly utilized instance. We had a seperate issue that was causing connections to this VIP to be held open. Because the connections weren't terminating, this irule quickly (4-8 hours) ran tmm out of memory.

     

    See SOL6578 regarding the changes to TCP::collect memory usage in v11.