Download file from AWS S3 bucket / http profile

Hi cpt_ri_F5 , 
Could you please disable any AWAF/ASM Policies if exists , Remove attached iRule and convert Virtual server type to performance layer 4 , If the issue is resolved so , Keep disabling ASM policy and attach http profile again , and test one more time. 
If it works with http profile , so you have issue with AWAF policy and need to check yout policy and AWAF system Variables. 

If the Download didn't work so you the issue is with http profile , and you need really to disable it , in this Case I recommend to add this : 

when HTTP_REQUEST {
    if { [class match [string tolower [HTTP::uri]] contains uri-data] } {
         HTTP::disable
         log local0. "Condition True in Request" 
         return
}
}
when HTTP_RESPONSE {
         HTTP::disable
         log local0. "Response Action achieved" 
}

> I addedd [Log local ] as a guide to make sure that your requests match with Conditions of if statement , and to make sure that http profile really disabled. 
> I added Return to break the irule , and prefer to attach the Pool "MYPOOL" under virtual server resources. 

The Last thing if this available with you, Take a Packet capture for both sides ( Client and server side ) with identifing the Download file request to see why it gives you an empty/corrupted file.

Follow the above steps , I hope this helps you

So, 2 questions here:
- Does datagroup 'uri-data' actually exist? Do you have the URI path there for the file you are looking to download?
- The HTTP::disable in the HTTP_RESPONSE will trigger on EVERY request, regardless if there is a match in the HTTP_REQUEST. You need to specify a variable in the HTTP_REQUEST and check it in the HTTP_RESPONSE. I presume that when that particular URI is matched, you only then want to disable the HTTP profile for that session -- both client side (http_request) and server side (http_response.

Hello Mohamed_Ahmed_Kansoh, whisperer 

Thank you for yor answers,

- Not ASM/WAF

- L4 (with/without http) : download empty/corrupted file.

- L4 (with http + Mohamed_Ahmed_Kansoh's iRule) : download empty/corrupted file.

- Standard (with http + Mohamed_Ahmed_Kansoh's iRule + no serverssl ) : 

<HTTP_REQUEST>: Condition True in Request

download empty/corrupted file.

- Standard (with http + Mohamed_Ahmed_Kansoh's iRule + serverssl ) : 

S3 XML Error : 

<Code>NoSuchBucket</Code>
<Message>The specified bucket does not exist</Message>
<HTTP_REQUEST>: Condition True in Request
<HTTP_RESPONSE>: Response Action achieved

I am in http (client) and https (server), MYPOOL S3 := 443

I keep looking at the pcap....

Thank you.

+

from F5 :

curl http//fqdn/path_file
=> ok

curl https//fqdn/path_file
=> ok

curl http://IP_node/path_file
=> same S3 XML Error

curl https://IP_node/path_file
=> SSL: certificate subject name 's3.xx-xxxx-x.amazonaws.com' does not match target host name IP_node