change https port on server side / multi SSL profile, SNI/ https from client to F5 and from F5 to server

In your first iRule you're using a redirect, which sends a response to the client telling it to come back to the specified URL. You're specifying URLs with the backend ports, so you're VIP isn't going to be listening for these.

In your second iRule you're just changing the Host header in the request, which does not change the physical port.

I'd recommend that you create a separate pool for each application. Example:

site1_pool = server IP(s):8443
site2_pool = server IP(s):9443
site3_pool = server IP(s):10443

Then in your iRule switch between the pools based on the requested Host:

when HTTP_REQUEST {
    switch [string tolower [HTTP::host]] {
        "www.site1.com" { pool site1_pool }
        "www.site2.com" { pool site2_pool }
        "www.site3.com" { pool site3_pool }
    }
}

By the way, you can do all of this in LTM policies instead of iRules.

Thanks Kevin

I will check that on my LTM VE 11.3 , LTM policies is only supported in the next version.

I also need to change the host name depending on Ip source address

With Internal IP address We must use kerberos , and with other adresses I will receive a web page for authentication username/password

Regards Didier

Thanks Kevin

I will check that on my LTM VE 11.3 , LTM policies is only supported in the next version.

I also need to change the host name depending on Ip source address

With Internal IP address We must use kerberos , and with other adresses I will receive a web page for authentication username/password

Regards Didier

when I hecked

https://www.site1.com -> www.site1.com:443 OK https://www.site2.com -> www.site2.com:80 KO https://192.168.201.100 (VS) -> www.site2.com:80 KO

site1_pool = server IP(s):443 site2_pool = server IP(s):80

when HTTP_REQUEST { switch [string tolower [HTTP::host]] { "www.site1.com" { pool site1_pool } "www.site2.com" { pool site2_pool } default { pool site2_pool } } }

It seems I can change the outbound port

when I hecked

https://www.site1.com -> www.site1.com:443 OK https://www.site2.com -> www.site2.com:80 KO https://192.168.201.100 (VS) -> www.site2.com:80 KO

site1_pool = server IP(s):443 site2_pool = server IP(s):80

when HTTP_REQUEST { switch [string tolower [HTTP::host]] { "www.site1.com" { pool site1_pool } "www.site2.com" { pool site2_pool } default { pool site2_pool } } }

It seems I can change the outbound port