Forum Discussion

hemantMF_366502's avatar
hemantMF_366502
Icon for Nimbostratus rankNimbostratus
Feb 01, 2019

Request to know best way to send message over HTTPS from CLIENTSSL_HANDSHAKE

Dear F5 community Context In the case when SSL termination is happening at the F5, i need to send a message over HTTPS to another machine in the CLIENTSSL_HANDSHAKE event.

 

Implementation I am using Mark's super sideband requestor(https://devcentral.f5.com/wiki/iRules.HTTP-Super-SIDEBAND-Requestor-Client-Handles-Redirects-Cookies-Chunked-Transfer-APM-Access-etc.ashx?Code=1) to do the same

 

Issue The solution is not working at scale. As i see connections getting aborted in the logs( Pending rule /Common/SendMsg aborted for 16.183.81.254:44023 -> 16.183.81.253:4265). I tried 1) Saving the state across multiple invocations and reusing the state 2) Batching up messages and using table command to save the outstanding data, still didn't help.

 

 

What could be the best way to accomplish this?

 

Thanks

 

application delivery
iRules
LTM

3 Replies

Sort By
  • hemantMF_366502's avatar
    hemantMF_366502
    Icon for Nimbostratus rankNimbostratus
    Feb 02, 2019

    The F5 is running on 12.0. By the way, I had an issue where the F5 was using the 127.1.1.x IP as source for sending data out on Physical F5 and in the case resolution, I used the workaround provided to use SNAT and add some code in he iRUle for CLIENT_ACCEPTED event to facilitate the same. Just in case it is relevant

     

    Thanks a ton