Forum Discussion

f5mkuDefault's avatar
Apr 08, 2021
Solved

How does F5 process a traffic

Hi experts,

 

Wanted to ask as I keep having hardtime googling to find an answer.

 

How does F5 process a traffic when a client initiates?

Does assume 3 way is completed, will F5 process SSL before irule? or F5 will check the irule first?

 

TIA

  • Take a look at this video from : https://youtu.be/qCLEw5xIZ7s

    It is for BIG-IP 12.1, but it is still relevant and very helpful.

    I watched it for like 45 minutes in Slow-Mo and replicated his drawing into a Visio. I attached my Visio as png.

    iRules are executed before, while and after the SSL handshake. Depending on the Event you choose.

    when CLIENT_ACCEPTED { ## happens when the TCP three-way handshake is completed successfully, before the SSL Handshake
     
    when CLIENTSSL_CLIENTHELLO { ## happens while the SSL Handshake
     
    when HTTP_REQUEST { ## happens after the SSL Handshake

2 Replies

  • Take a look at this video from : https://youtu.be/qCLEw5xIZ7s

    It is for BIG-IP 12.1, but it is still relevant and very helpful.

    I watched it for like 45 minutes in Slow-Mo and replicated his drawing into a Visio. I attached my Visio as png.

    iRules are executed before, while and after the SSL handshake. Depending on the Event you choose.

    when CLIENT_ACCEPTED { ## happens when the TCP three-way handshake is completed successfully, before the SSL Handshake
     
    when CLIENTSSL_CLIENTHELLO { ## happens while the SSL Handshake
     
    when HTTP_REQUEST { ## happens after the SSL Handshake
    • f5mkuDefault's avatar
      f5mkuDefault
      Icon for Cirrus rankCirrus

      this is my same understanding, really depends on the event type used. Will check that video and visio file. Thanks Daniel.