For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dwillis619_3073's avatar
dwillis619_3073
Icon for Nimbostratus rankNimbostratus
May 26, 2017

Dynamically remove serverssl profile

My question is how the iRule should look to dynamically remove the serverssl profile when traffic goes to pool using 80. I have a pool with a WAF and a real server set in priority groups with the WA...
application delivery
iRules
Anesh's avatar
Anesh
Icon for Cirrostratus rankCirrostratus
May 26, 2017

Some suggestions:

when CLIENT_ACCEPTED { 

if { [TCP::local_port] == 80} { 

SSL::disable 
pool myPool_80 

} elseif { [TCP::local_port] == 443 } { 
SSL::enable
pool myPool_443
} 
}