For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shuvo_166796's avatar
Shuvo_166796
Icon for Nimbostratus rankNimbostratus
Aug 14, 2014

Force SSL Profile Based on URL

I've a requirement to force SSL profile based on URL. I've created two different client SSL profile i.e. wildcard_ssl & wildcard_ssl_strong. Then I tried to create an iRules contains the following: ...
application delivery
devops
iRules
LTM
Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
Aug 15, 2014

Hi,

maybe you can try something like this :

  when HTTP_REQUEST {
  if {[HTTP::uri] starts_with "/securearea/" } {
      HTTP::collect
      SSL::session invalidate
      SSL::profile ssl_profile2
      SSL::renegotiate enable
      SSL::renegotiate
  }
}

Yann

Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
Aug 15, 2014
without HTTP::collect :)