Apr 13, 2014
HSL logging logs strange URI
Hi!
Wrote a logging iRule to log cache response headers with HSL. It works fine generally but some uris are pretty strange.
Here is the rule:
when HTTP_REQUEST priority 999 {
set host [str...
Another update, apparently IIS actually handles and processes URI's with the protocol + fqdn + uri as URI while only logging the URI. I have no idea what the entries that I found came from though so that needs more digging.
If someone else encounters this it seems like some proxies enters the URI that way when handling HTTP 1.1 connections. My source is not 100% reliable, but upon checking the top incoming public IPs it sure looks like they're proxies.
These seems to go straight through the LB without being cached so we had to rewrite the URI before caching it.
Here it is in case someone else needs it.
when HTTP_REQUEST {
set uri [string tolower [HTTP::uri]]
if { $uri starts_with "https://" } {
scan $uri {https://%[^/]%s} host uri
HTTP::uri $uri
}
}
/Patrik