Symptoms
Some iRule commands cannot be used in as Visual Policy Editor (VPE) rules: you can configure them and save them; however, they cause output errors during runtime. Specific examples:
https://devcentral.f5.com/wiki/iRules.md5.ashx (md5)
https://devcentral.f5.com/wiki/iRules.AES.ashx (AES commands)
https://devcentral.f5.com/wiki/iRules.CRYPTO.ashx (CRYPTO commands)
Sample errors (during runtime):
Feb 15 10:59:33 bigip1 err apmd[14266]: 01490086:3: /Common/nabu-simple-pa-full-wt:Common:b4c8de1c: Rule evaluation failed with error: invalid command name "md5"
Feb 15 10:59:33 bigip1 err apmd[14266]: 01490086:3: /Common/nabu-simple-pa-full-wt:Common:b4c8de1c: Rule evaluation failed with error: invalid command name "AES::key"
Feb 15 10:59:33 bigip1 err apmd[14266]: 01490086:3: /Common/nabu-simple-pa-full-wt:Common:b4c8de1c: Rule evaluation failed with error: invalid command name "CRYPTO::encrypt"
Impact
iRules fail and errors occur.
Workaround
APM supports the various facilities provided by the Tcl language; for example, loops (while, foreach, and so on), conditions (ifelse, switch, and so on), functions (proc), and built-in Tcl commands (strings, split, and so on), as well as various Tcl operators.