NimbostratusHi Friends
My environment is as follow:
Before:
telnet client ----》 aduit device ----》 telnet server
Change to:
ssh client ---》 F5 BIGIP（ssh proxy） ---->> aduit device ---->> telnet server
In order to secure the front need to use SSH to log in,But the backend needs to audit the telnet commands log.
So BIGIP need to change the flow from telnet to ssh.
How to realize this function. iRules or Other？
Nimbostratus
NimbostratusTelnet and SSH are two drastically different application protocols... SSH uses a non-SSL based encryption scheme to encrypt traffic between the client and the server; telnet is basically a raw socket.
It would be possible to use something like stunnel on the client, then routing your telnet client through that, but that's still not as good as SSH.
Client Machine | BigIP Device | Audit Device | Server
----------------------------+--------------------------------------+-------------------+------------------
telnet client --> stunnel --|--> BigIP SSL/TLS virtual (offload) --|--> audit device --|--> telnet server
I'd personally recommend something like SSH, paired with auditd on the server side: http://whmcr.com/2011/10/14/auditd-logging-all-commands/
Nimbostratus