Bug 964 - Realtime and historic all "SSL statistics" for individual virtual host

Review Request #421 — Created Aug. 22, 2024 and updated

kevin.poh
APV10
rel_apv_10_7
964
timlai, weikai

8 new parameters need to be added to the "SSL Virtual Host" to meet reporting requirements.
These parameters are derived from the command /ca/bin/anetstat -p ssl.
After reviewing the original structure of the SSL Communication, defined in struct sslstat (located in ssl_usrreq.h),
we need to apply some of these parameters to the SSL Virtual Host structure, defined in struct ssl_vhost_stats (also in ssl_usrreq.h).

After careful analysis, we decided to reuse existing parameters that serve a similar purpose and create new ones for those that are not already available.

File edited:
1. usr\src\sys\click\app\ssl\ssl_usrreq.h
(Add alert_send and alert_received parameters)
2. usr\src\sys\click\app\ssl\ssl_alert.c
(Add the count for the alert_send and alert_received)
3. usr\src\sys\click\app\ssl\ssl_est.c
(add the count for the alert_received)
4. usr\src\sys\click\app\ssl\ssl_ui.c
(Display the 8 parameters based on the CLI command : show statistics ssl)

  1. Setup a virtual services in either HTTPS, FIPS, or TCPS
    (SLB > Virtual Services > Add
  2. Select and click the created virtual services and create new SSL Virtual Host
    (This SSL Virtual Host will be associated to the corresponding virtual service)
  3. Type the url for the virtual services in the browser, ex: https://172.20.0.159
  4. The new added parameters on CLI command : show statistics ssl, will show some changes meaning successful
Description From Last Updated

Do we need this parameter ?

timlaitimlai

Do we need this parameter ?

timlaitimlai

Remove unused parameter

timlaitimlai

Why we need this function here ?

timlaitimlai

formatting

timlaitimlai

formatting

timlaitimlai
Loading...