For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Patrick_McGlyn1's avatar
Patrick_McGlyn1
Icon for Nimbostratus rankNimbostratus
Mar 30, 2007

Changing between SSL Termination and non-SSL Termination

We have an issue where for one application we want to terminate SSL on the F5 and use cookies persistence only for one client based on the client source IP.     I put together the following irul...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 04, 2007
I would think that you could make layer 4 decisions (client and/or server IP and/or port) without decrypting the SSL.

 

 

Couldn't you configure a client SSL profile on the VIP, but then disable SSL for all requests but the ones that need decrypting for cookie persistence?

 

 

There should be some examples in this forum using SSL::disable (rather than SSL::profile).

 

 

Aaron