Forum Discussion
Reverse Monitor and Pool Member Recovery
Hello Dear
i have one public IP and more than domain need to be published as https service so in this case it is need to move traffic to pool based on URL
MustphaBassim If your end users use SNI you can configure SNI on one virtual server (VS) with multiple Client SSL Profiles and then all sites can use the one VS. You can attach an iRule to the VS and send different host fields to different pools. Alternatively you can purchase one SSL certificate that matches the different FQDNs and put that one Client SSL profile on the VS and use the iRule to split the traffic between the different pools. The only other alternative would be to configure a PAT on your perimeter device that listens for 443 and NATs that the F5 VS IP on port 443 and then the other one can have 8443, example "https://example.com:8443/" which then hits the perimeter device and does a PAT for 8443 to the other F5 VS IP on 443. The best option for all users to be supported would be the one SSL certificate that covers all FQDNs, second would be SNI, and the last one would be the PAT because that would require the end user to know to put the alternate port in the URL.
I'm not quite sure what your question is - are you asking for help understanding what your current RewriteRule does (it seems to rewrite "/" to "/ptg/rm"), or are you asking how to implement the same rule in an iRule (or ltm policy), or is the question something else ?
If you were to use a policy, it would be something like this:
ltm policy rewriteurls { requires { http } rules { rewrite_root { actions { 0 { http-uri replace path /ptg/rm } } conditions { 0 { http-uri path values { / } } } ordinal 1 } } strategy first-match }
Does that help ?
- BKA_201457Feb 10, 2016
Nimbostratus
I know how to rewrite "/" to "/ptg/rm". I think I am over-thinking it. Thanks for the response. Made me realize that I was looking at it wrong. It just isnt working. Its working through the current reverse proxy configuration, but I cannot get it to work through the F5. I have plenty of others working through the F5, but this one seems different. I'll figure it out. Thanks again.