Forum Discussion
jk20004_44080
Nimbostratus
Nimbostratusbest way to reject SSL Connections
We use IPI and we drop the requests via iRule because we cannot use ASM at every VS.
today we reject the connect in then CLIENT_ACCEPTED but the result is a
SSL Handshake failed for TCP xxx.xx...
Andy_McGrath
Cumulonimbus
CumulonimbusYou are getting SSL error as the CLIENT_ACCEPTED event is triggered once the TCP connection has been established so the client has likely already sent the SSL Client Hello before being rejected.
Personally if this is for security and public I would drop the connection instead of rejecting it. These will mean the client TCP connection will timeout.
