Forum Discussion

jake_macabuag_4's avatar
jake_macabuag_4
Icon for Nimbostratus rankNimbostratus
Jan 07, 2013

Content switching with SSL offloading on a single virtual server address

Hi guys   we are planning to implement content-switching and just using one virtual server ip address. This single ip will represent multiple urls with SSL. This is in order for our client to save...
application delivery
dev
devops
iRules
jake_macabuag_4's avatar
jake_macabuag_4
Icon for Nimbostratus rankNimbostratus
Jan 14, 2013
Seems like we will encounter a problem. IP Filtering will be done on the POOL level and not on the VS.

 

1. There is a list of ip address that is allowed to access POOL_A and a different set of address for POOL_B and so on. Not limited to just one data group. Example

 

 

Data Group: Allowed_Pool_A = ip address A, B and C ---> Allowed to access OPIS POOL but not RESELLER POOL

 

Allowed_Pool_B = ip address X, Y and Z ---> Allowed to access RESELLER POOL but not OPIS POOL

 

 

If the ip is accepted on the first irule, it has no means to check if it is allowed to access the pool .