How does F5 process a traffic

[f5mkuDefault]

Hi experts,

Wanted to ask as I keep having hardtime googling to find an answer.

How does F5 process a traffic when a client initiates?

Does assume 3 way is completed, will F5 process SSL before irule? or F5 will check the irule first?

TIA

[Daniel_Wolf · Accepted solution]

Take a look at this video from : https://youtu.be/qCLEw5xIZ7s

It is for BIG-IP 12.1, but it is still relevant and very helpful.

I watched it for like 45 minutes in Slow-Mo and replicated his drawing into a Visio. I attached my Visio as png.

iRules are executed before, while and after the SSL handshake. Depending on the Event you choose.

when CLIENT_ACCEPTED { ## happens when the TCP three-way handshake is completed successfully, before the SSL Handshake
 
when CLIENTSSL_CLIENTHELLO { ## happens while the SSL Handshake
 
when HTTP_REQUEST { ## happens after the SSL Handshake

[f5mkuDefault]

this is my same understanding, really depends on the event type used. Will check that video and visio file. Thanks Daniel.