Forum Discussion

Rasman_75397's avatar
Rasman_75397
Icon for Nimbostratus rankNimbostratus
Feb 26, 2016

Disable HTTP2 profile from iRule?

Hi! We will implement HTTP2 since it's supported in version 12. There is one iRule assigned to VIP that requires SSL renegotiation. Renegotiation conflicts with HTTP2 and gives SPDY protocol error. T...
application delivery
http 2.0
iRules
LTM
ssltls
John_Alam_45640's avatar
John_Alam_45640
Historic F5 Account
Mar 01, 2016

Have you tried the vip-to-vip scenario. You will want to make sure the renegotiation iRule logic goes with the proper virtual.

when CLIENT_ACCEPTED {
    set collecting 0
    set renegtried 0
      Find out country tag
    set CountryID "[whereis [IP::client_addr] country]"
     internal proxy to another virtual
    if {$CountryID eq "EE"} {
                sharedvar CountryID
                virtual renegotiation_virtual
    }
}

HTH

  • John_Alam_45640's avatar
    John_Alam_45640
    Historic F5 Account
    Mar 01, 2016
    Note: this will remove HTTP2 profile from every connection coming from country in question but, you still only renegotiate for the special URI.
  • Rasman's avatar
    Rasman
    Icon for Nimbostratus rankNimbostratus
    Mar 02, 2016
    Thanks! Will test this. Would prefer to use same VIP but this is perhaps the only way to get around this.