Forum Discussion
F5 rule for TLS redirect
Hi i am beginner trying to get a F5 rule to work. So any request that comes in with less than TLS 1.2 should redirect to a default page. Now i need to create a exception to this? Except for one URL send all other < TLS1.2 to the default page. Here are my rules
when CLIENTSSL_HANDSHAKE { if { [SSL::cipher version] equals "TLSv1.2" } then { set deny_reason "" } else { set deny_reason [URI::encode [b64encode "Denied SSL Handshake for Client [IP::client_addr]:[TCP::client_port] using [SSL::cipher version], [SSL::cipher name] and [SSL::cipher bits]"]] } }
when HTTP_REQUEST { if { ($deny_reason ne "") and not ([HTTP::uri] starts_with "/myvalue")} then { HTTP::respond 302 Location "MyURL?reason=$deny_reason" Cache-Control No-Cache Pragma No-Cache Connection Close } }
This rule breaks every thing and the website does'nt work. Appreciate any help.
2 Replies
- Stanislas_Piro2
Cumulonimbus
Did you look at the ltm log file? Is there tcl error events?
- Stanislas_Piro2
Cumulonimbus
Please, when you post content, use formatting buttons just above text to make it readable!
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com