Forum Discussion

John_Ogle_45372's avatar
John_Ogle_45372
Icon for Nimbostratus rankNimbostratus
Feb 09, 2010

disable ssl client profile based on source address

  Can someone show me an iRule that would allow me to disable the SSL Client profile dynamically based on the source address. We have an app server that needs to talk http but all the other clien...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 09, 2010
Hi John,

You can use SSL::disable after checking the client IP. To check a single client IP address or range, you can use the IP::addr command (Click here). To check the client IP against multiple addresses or ranges, you can use the matchclass command (Click here). 

 
 when CLIENT_ACCEPTED  
  
     Check if client IP is 10.10.10.0/24 
    if {[IP::addr [IP::client_addr] equals 10.10.10.0/24]}{ 
  
        Disable the client SSL profile 
       SSL::disable 
    } 
 }

Aaron