Forum Discussion
Create F5 LTM Content for http / https via port 8080
The first and most important thing is that you shouldn't try to do SSL and non-SSL with the same IP/port combination. You also wouldn't be able to create two VIPs with the same IP and port.
On the second part, if I understand you correctly, you have a wildcard port VIP (ex. 1.1.1.1:0) so that you can accept port 80, 8080, and 443. The iRule for that might look like this:
when CLIENT_ACCEPTED {
switch [TCP::local_port] {
80 {
pool my_80_pool
SSL::disable clientside
}
8080 {
pool my_8080_pool
SSL::disable clientside
}
443 {
pool my_443_pool
}
default {
reject
}
}
}
Apply a client SSL profile to the VIP. It will be disabled if the client request port 80 or 8080, and any request on an undefined port will be rejected.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
