For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ken_Cottrell's avatar
Ken_Cottrell
Icon for Nimbostratus rankNimbostratus
Apr 15, 2010

Anyone using the LDAP Proxy iRule with and SSL Virt Host?

We have implemented the LDAP Proxy iRule on a non-ssl Virtual host to send read and write requests to separate pools. When implementing the same iRule for an ssl Virtual host, we are getting a NamingE...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 20, 2010
Hi Skynard,

 

 

If the clientside connection is encrypted and you want to inspect the decrypted payload, I think you'd need to use SSL::collect and SSL::payload on v10.x to handle this. Or in v9.4+ you could use a simple iRule on the existing SSL VIP which uses the command to call a second internal VIP which uses the LDAP proxy iRule enabled.

 

 

Aaron