Forum Discussion

John_Ogle_45372's avatar
John_Ogle_45372
Icon for Nimbostratus rankNimbostratus
Feb 09, 2010

disable ssl client profile based on source address

 

Can someone show me an iRule that would allow me to disable the SSL Client profile dynamically based on the source address. We have an app server that needs to talk http but all the other clients need to keep using HTTPS. Any help is very much appreciated.

 

 

Thank you,
application delivery
dev
devops
iRules
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Feb 09, 2010
    Hi John,

    You can use SSL::disable after checking the client IP. To check a single client IP address or range, you can use the IP::addr command (Click here). To check the client IP against multiple addresses or ranges, you can use the matchclass command (Click here). 

     
 when CLIENT_ACCEPTED  
  
     Check if client IP is 10.10.10.0/24 
    if {[IP::addr [IP::client_addr] equals 10.10.10.0/24]}{ 
  
        Disable the client SSL profile 
       SSL::disable 
    } 
 }

    Aaron