For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Landono's avatar
Landono
Icon for Nimbostratus rankNimbostratus
Jan 20, 2014

Disabling SSL based on URI

Currently we have a virtual server that handles SSL traffic and send it to a pool of webservers over port 443. While ideally we would terminate SSL on the F5 and just sent HTTP traffic to the servers...
application delivery
devops
iRules
JoshBecigneul's avatar
JoshBecigneul
Icon for MVP rankMVP
Jan 20, 2014

Hi Landono,

You can make use of the "SSL::disable serverside" command. Be sure to specify this command before the pool command, as shown below:

when HTTP_REQUEST {
        if { [HTTP::path] starts_with "/keyword" } {
                SSL::disable serverside
                pool pool_keyword.foo.bar.net_http
        } 
}

You can get more information on this command here: https://devcentral.f5.com/wiki/iRules.ssl__disable.ashx