Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

The FLOW_INIT Event and Event Order

Does this event come before or after the CLIENT_ACCEPTED event? I'm guessing before but would like to know for sure.

Also, will this event only fire if packet filters are used or always?

0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Does this event come before or after the CLIENT_ACCEPTED event? I'm guessing before but would like to know for sure.

iRules Event Order by Colin Walker
https://devcentral.f5.com/articles/irules-event-order#.U2C7N1dhcdV

Also, will this event only fire if packet filters are used or always?

do you mean network > packet filters? i think the packet filter occurs prior.

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Hey Nitass, thanks. It's not listed in that article as it's a new event in v11.4.1.

I do mean that and yes packet filters occur first, it's just not 100% clear if this event only fires if packet filters are used. Still, if PFs are applied before even RULE_INIT I don't see how this could be indicated so I'm 99% sure it always triggers.

0
Comments on this Answer
Comment made 30-Apr-2014 by nitass 13357
oh sorry, i misread. it is afm. i thought you are talking about rule_init.
0
Comment made 01-May-2014 by What Lies Beneath 6708
So will it only fire if AFM is installed/provisioned?
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

it seems it is fired even afm is not provisoned.

e.g.

root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos)# list sys provision afm
sys provision afm { }

[root@ve11a:Active:In Sync] config # tmsh list ltm rule qux
ltm rule qux {
    when FLOW_INIT {
        log local0. ""
}
when CLIENT_ACCEPTED {
        log local0. ""
}
}

[root@ve11a:Active:In Sync] config # tail /var/log/ltm
May  1 02:46:17 ve11a info tmm1[14715]: Rule /Common/qux :
May  1 02:46:17 ve11a info tmm1[14715]: Rule /Common/qux :
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Awesome, thanks Nitass.

0