Forum Discussion
hooleylist
Oct 15, 2006Cirrostratus
Hi Denny,
If the BIG-IP is acting as a full proxy, then during the initial connection set up with the client (which the CLIENT_ACCEPTED event is for), there isn't a server connection built yet.
If this did work in 4.x, I would guess that it's because server_port referred to the VIP as the server and you were getting the VIP's port.
If you want to get the client's source port, you can use TCP::remote_port in the clientside context or TCP::client_port which is just clientside { TCP::remote_port }. To get the client's destination port (or the VIP's port) you can use TCP::local_port.
We had a bit of discussion on context for events in this post (Click here).
Hope this helps with the rest of your rule.
Aaron