Bug ID 709621: iRule commands that are invalid in the VPE

Last Modified: Nov 15, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP TMOS(all modules)

Known Affected Versions:
14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2

Opened: Mar 09, 2018
Severity: 4-Minor

Symptoms

Some iRule commands cannot be used in as Visual Policy Editor (VPE) rules: you can configure them and save them; however, they cause output errors during runtime. Specific examples: https://devcentral.f5.com/wiki/iRules.md5.ashx (md5) https://devcentral.f5.com/wiki/iRules.AES.ashx (AES commands) https://devcentral.f5.com/wiki/iRules.CRYPTO.ashx (CRYPTO commands) Sample errors (during runtime): Feb 15 10:59:33 bigip1 err apmd[14266]: 01490086:3: /Common/nabu-simple-pa-full-wt:Common:b4c8de1c: Rule evaluation failed with error: invalid command name "md5" Feb 15 10:59:33 bigip1 err apmd[14266]: 01490086:3: /Common/nabu-simple-pa-full-wt:Common:b4c8de1c: Rule evaluation failed with error: invalid command name "AES::key" Feb 15 10:59:33 bigip1 err apmd[14266]: 01490086:3: /Common/nabu-simple-pa-full-wt:Common:b4c8de1c: Rule evaluation failed with error: invalid command name "CRYPTO::encrypt"

Impact

iRules fail and errors occur.

Conditions

Using iRules in the VPE

Workaround

APM supports the various facilities provided by the Tcl language; for example, loops (while, foreach, and so on), conditions (ifelse, switch, and so on), functions (proc), and built-in Tcl commands (strings, split, and so on), as well as various Tcl operators.

Fix Information

None

Behavior Change