For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rasman_75397's avatar
Rasman_75397
Icon for Nimbostratus rankNimbostratus
Feb 26, 2016

Disable HTTP2 profile from iRule?

Hi! We will implement HTTP2 since it's supported in version 12. There is one iRule assigned to VIP that requires SSL renegotiation. Renegotiation conflicts with HTTP2 and gives SPDY protocol error. T...
application delivery
http 2.0
iRules
LTM
ssltls
John_Alam_45640's avatar
John_Alam_45640
Historic F5 Account
Mar 01, 2016

Have you tried the vip-to-vip scenario. You will want to make sure the renegotiation iRule logic goes with the proper virtual.

when CLIENT_ACCEPTED {
    set collecting 0
    set renegtried 0
      Find out country tag
    set CountryID "[whereis [IP::client_addr] country]"
     internal proxy to another virtual
    if {$CountryID eq "EE"} {
                sharedvar CountryID
                virtual renegotiation_virtual
    }
}

HTH

Rasman's avatar
Rasman
Icon for Nimbostratus rankNimbostratus
Mar 02, 2016
Thanks! Will test this. Would prefer to use same VIP but this is perhaps the only way to get around this.