Forum Discussion

b_seweryn_15157's avatar
b_seweryn_15157
Icon for Nimbostratus rankNimbostratus
Dec 14, 2015

choose SSL profiles based on context

Hi All,   do you have any idea how to prepare iRule that will choose proper ssl profile based on URI context? so something like that: test.domain.com/abc goes to SSL_profile_1 test.domain.com/def ...
application delivery
BIG-IP
LTM
Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Dec 14, 2015

Because of the way SSL works, you won't be able to see the URI until after the SSL negotiation has taken place, as the URI is encrypted. The server won't know the URI until it has already negotiated everything with the browser (i.e. it's already specified a certificate and the browser has accepted it). That means you wouldn't be able to use URI as a decision point.

 

One thing you could consider is using SNI which would allow you to decide based on different hosts.

 

Hope this helps.