Forum Discussion

Angel_Lopez_116's avatar
Angel_Lopez_116
Icon for Altostratus rankAltostratus
Mar 26, 2014

Differentiate between client-initiated and server-initiated SSL renegotiations

Hi!   I'm trying to configure my F5 LTM 11.3 to be able to allow server-initiated SSL renegotiations but reject client-initiated SSL renegotiations. In the clientssl profile I've configured a rene...
application delivery
devops
iRules
LTM
security
ssl
TMOS
gbbaus_104974's avatar
gbbaus_104974
Historic F5 Account
Mar 27, 2014

OK..

Maybe look at 

Mitigating the THC SSL DoS Threat
http://devcentral.f5.com/weblogs/macvittie/archive/2011/10/28/f5-friday-mitigating-the-thc-ssl-dos-threat.aspx

and

SSL Renegotiation DOS attack – an iRule Countermeasure : 
https://devcentral.f5.com/articles/ssl-renegotiation-dos-attack-ndash-an-irule-countermeasure

and here

SSL Renegotiation, Execution Halting and HTTP Rewriting : 
https://devcentral.f5.com/articles/20-lines-or-less-49-ssl-renegotiation-execution-halting-and-http-rewriting

I am sure these might be able to assist