Forum Discussion
Adrien_Legros_1
Altostratus
AltostratusChoosing WAF and SSL offload via Irules
Hello, here is what we are trying to perform:
We want that the internal request go to the ASM. So the BigIP VIP has an sslprofile, perform the ssl offload, goes in the Irule and is anal...
Adrien_Legros_1Altostratus
AltostratusUnfortunately, even after some Irule changes, it still doesn't work. Here is what I've done:
When I arrive with an external IP, I entered in the IF (event client accepted) but the request doesn't go to the default pool. The same when I place the command pool pool_external in the event.
Someone has Another idea?
Thanks a lot.
when CLIENT_ACCEPTED {
log local0. "--- New TCP connection from [IP::client_addr]:[TCP::client_port] to [IP::local_addr]:[TCP::local_port] ---"
if {not [matchclass [IP::client_addr] starts_with $::internal]} {
log local0. "Client externe qui a l IP [IP::client_addr] DIRECT vers Teros"
HTTP::disable
SSL::disable
}
}
when HTTP_REQUEST {
if {not [matchclass [IP::client_addr] starts_with $::nbbonly]} {
log local0. "HTTPrequest Client externe qui a l IP [IP::client_addr] DIRECT vers Teros"
pool pool_pub_viaTeros
event disable all
} else {
requete client interne [HTTP::uri] via ASM
log local0. "requete interne [HTTP::uri] via ASM"
HTTP::header insert nbbclientip [IP::client_addr]
......
