For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shuvo_166796's avatar
Shuvo_166796
Icon for Nimbostratus rankNimbostratus
Aug 14, 2014

Force SSL Profile Based on URL

I've a requirement to force SSL profile based on URL. I've created two different client SSL profile i.e. wildcard_ssl & wildcard_ssl_strong. Then I tried to create an iRules contains the following: ...
application delivery
devops
iRules
LTM
IheartF5_45022's avatar
IheartF5_45022
Icon for Nacreous rankNacreous
Aug 14, 2014

To support Yann - CLIENT_ACCEPTED is triggered when the first SYN is received (so no time to look at HTTP request information as the SSL has not even been negotiated yet), and if SSL had been negotiated it's too late to assign a new SSL profile. So take a look at [https://devcentral.f5.com/articles/ssl-profiles-part-7-server-name-indication] (https://devcentral.f5.com/articles/ssl-profiles-part-7-server-name-indication).