nerdexam
F5

101 · Question #32

A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP header values. Which two profile types must be associated with such a virtual server. (Choose two.)

The correct answer is A. TCP B. HTTP. Parsing HTTP headers in an iRule requires a TCP profile for transport handling and an HTTP profile to expose HTTP header data to iRule events.

Section 5: Application Delivery Basics

Question

A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP header values. Which two profile types must be associated with such a virtual server. (Choose two.)

Options

  • ATCP
  • BHTTP
  • CHTTPS
  • DServerSSL

How the community answered

(46 responses)
  • A
    85% (39)
  • C
    11% (5)
  • D
    4% (2)

Why each option

Parsing HTTP headers in an iRule requires a TCP profile for transport handling and an HTTP profile to expose HTTP header data to iRule events.

ATCPCorrect

The TCP profile provides the required full-proxy transport-layer connection management that the virtual server depends on, and it is the prerequisite base profile before any higher-layer profile can process traffic.

BHTTPCorrect

The HTTP profile instructs BIG-IP to parse traffic as HTTP, which activates HTTP iRule events such as HTTP_REQUEST and makes header values accessible to the iRule - without it, the iRule cannot reference or act on HTTP headers regardless of the underlying traffic.

CHTTPS

There is no BIG-IP profile type named HTTPS - SSL offload for inbound client connections is handled by a ClientSSL profile, and this profile alone does not enable HTTP header inspection in iRules.

DServerSSL

The ServerSSL profile is used to re-encrypt traffic traveling from BIG-IP to backend pool members, not to decrypt or inspect inbound client-side traffic for iRule processing.

Concept tested: F5 BIG-IP iRule HTTP header inspection required profiles

Source: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-local-traffic-management-irules-concepts.html

Topics

#ClientSSL profile#HTTP profile#TCP profile#iRules HTTPS

Community Discussion

No community discussion yet for this question.

Full 101 Practice