101 · Question #32
A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP header values. Which two profile types must be associated with such a virtual server. (Choose two.)
The correct answer is A. TCP B. HTTP. Parsing HTTP headers in an iRule requires a TCP profile for transport handling and an HTTP profile to expose HTTP header data to iRule events.
Question
A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP header values. Which two profile types must be associated with such a virtual server. (Choose two.)
Options
- ATCP
- BHTTP
- CHTTPS
- DServerSSL
How the community answered
(46 responses)- A85% (39)
- C11% (5)
- D4% (2)
Why each option
Parsing HTTP headers in an iRule requires a TCP profile for transport handling and an HTTP profile to expose HTTP header data to iRule events.
The TCP profile provides the required full-proxy transport-layer connection management that the virtual server depends on, and it is the prerequisite base profile before any higher-layer profile can process traffic.
The HTTP profile instructs BIG-IP to parse traffic as HTTP, which activates HTTP iRule events such as HTTP_REQUEST and makes header values accessible to the iRule - without it, the iRule cannot reference or act on HTTP headers regardless of the underlying traffic.
There is no BIG-IP profile type named HTTPS - SSL offload for inbound client connections is handled by a ClientSSL profile, and this profile alone does not enable HTTP header inspection in iRules.
The ServerSSL profile is used to re-encrypt traffic traveling from BIG-IP to backend pool members, not to decrypt or inspect inbound client-side traffic for iRule processing.
Concept tested: F5 BIG-IP iRule HTTP header inspection required profiles
Source: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-local-traffic-management-irules-concepts.html
Topics
Community Discussion
No community discussion yet for this question.