For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fgomez_219402's avatar
fgomez_219402
Icon for Nimbostratus rankNimbostratus
Sep 02, 2015

apply an SSL profile in order to apply an iRule

Hi,   I need to apply an iRule to a VS. However, I just can't apply an http profile since the VS is for a 443 pool. The cert is currently installed on the "pool" side. So my question is can I sti...
application delivery
design
devops
iRules
arpydays's avatar
arpydays
Icon for Nimbostratus rankNimbostratus
Sep 02, 2015

Hi, there are two contexts to be aware of, client-side (client>F5) and server-side (F5>server). For SSL you have 3 options,

 

  1. SSL Offload - terminate SSL at the F5 client-side and then unencrypted HTTP server-side - requires client-SSL profile
  2. SSL Bridging (re-encrypt) - terminate SSL at the F5 client-side and then re-encrypt HTTP server-side - requires client-SSL profile and server-SSL profile
  3. SSL Passthrough - no SSL termination - no SSL profiles required

For the first 2 options you can apply a HTTP profile and do irule work at HTTP level, for the last option the F5 has no visibility of HTTP as it's not decrypting the traffic. If your webserver is terminating SSL and you also want the F5 to terminate SSL and be able to apply HTTP logic then option 2 is what you want.

 

hope this helps, cheers