Last Modified: Sep 14, 2023
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6
Opened: Mar 09, 2018 Severity: 4-Minor
Some iRule commands cannot be used in as Visual Policy Editor (VPE) rules: you can configure them and save them; however, they cause output errors during runtime. Specific examples: https://devcentral.f5.com/wiki/iRules.md5.ashx (md5) https://devcentral.f5.com/wiki/iRules.AES.ashx (AES commands) https://devcentral.f5.com/wiki/iRules.CRYPTO.ashx (CRYPTO commands) Sample errors (during runtime): Feb 15 10:59:33 bigip1 err apmd[14266]: 01490086:3: /Common/nabu-simple-pa-full-wt:Common:b4c8de1c: Rule evaluation failed with error: invalid command name "md5" Feb 15 10:59:33 bigip1 err apmd[14266]: 01490086:3: /Common/nabu-simple-pa-full-wt:Common:b4c8de1c: Rule evaluation failed with error: invalid command name "AES::key" Feb 15 10:59:33 bigip1 err apmd[14266]: 01490086:3: /Common/nabu-simple-pa-full-wt:Common:b4c8de1c: Rule evaluation failed with error: invalid command name "CRYPTO::encrypt"
iRules fail and errors occur.
Using iRules in the VPE
APM supports the various facilities provided by the Tcl language; for example, loops (while, foreach, and so on), conditions (ifelse, switch, and so on), functions (proc), and built-in Tcl commands (strings, split, and so on), as well as various Tcl operators.
None