For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cpt_ri_F5's avatar
cpt_ri_F5
Icon for Cirrostratus rankCirrostratus
Jun 13, 2023
Solved

Download file from AWS S3 bucket / http profile

Hello, I'm trying to download a file from AWS S3 bucket (backend) through a standard VS (HTTP/iRule) but it doesn't work. It downloads an empty/corrupt file.   "curl path/file" works from F5.   ...
application delivery
  • cpt_ri_F5's avatar
    cpt_ri_F5
    Jun 14, 2023

    Hello,

    Resolved, add only : HTTP::header replace Host "hostname"

    FYI : url is : hostname.bucket.xxxxxxaws......

cpt_ri_F5's avatar
cpt_ri_F5
Icon for Cirrostratus rankCirrostratus
Jun 14, 2023

Hello Mohamed_Ahmed_Kansoh, whisperer 

Thank you for yor answers,

- Not ASM/WAF

- L4 (with/without http) : download empty/corrupted file.

- L4 (with http + Mohamed_Ahmed_Kansoh's iRule) : download empty/corrupted file.

- Standard (with http + Mohamed_Ahmed_Kansoh's iRule + no serverssl ) : 

<HTTP_REQUEST>: Condition True in Request

download empty/corrupted file.

- Standard (with http + Mohamed_Ahmed_Kansoh's iRule + serverssl ) : 

S3 XML Error : 

<Code>NoSuchBucket</Code>
<Message>The specified bucket does not exist</Message>
<HTTP_REQUEST>: Condition True in Request
<HTTP_RESPONSE>: Response Action achieved

 

I am in http (client) and https (server), MYPOOL S3 := 443

I keep looking at the pcap....

Thank you.

Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jun 14, 2023

Hi cpt_ri_F5 , 

Can you bypass bigip and try to download it directly from server ? To make sure that bigip is point of interrupt your download. 

Pcap may give us some insights , you may find TCP-Window-FULL and TCP-Zero-Window. 
you may need to increase bigip buffer of window scale from bigip. 

But test first from server itself directly without bigip in path.