Forum Discussion

AlexS_yb's avatar
AlexS_yb
Icon for Cirrocumulus rankCirrocumulus
Aug 08, 2021

have ssl and non ssl pools (or pool members) for a VS

Hi   So I am migrating a nginx config over to F5. Some upstream end points are SSL and some are not.   So on my VS profile I have configured ssl (server), so by default all of my pool connec...
devops
iRules
LTM
security
  • Mayur_Sutare's avatar
    Mayur_Sutare
    Aug 09, 2021

    You can use LTM policy or iRule to disable server SSL profile based on matching specific condition e.g. hostname. I would recommend you to use LTM policy for achieving this. While creating the LTM policy, you can match condition for the incoming request like hostname/URL/URI for which you want to disable server SSL and set disable server ssl action for it. After applying this LTM policy on the desired vServer, your requirement should be fulfilled.

     

    Hope it helps!

Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP

You can use LTM policy or iRule to disable server SSL profile based on matching specific condition e.g. hostname. I would recommend you to use LTM policy for achieving this. While creating the LTM policy, you can match condition for the incoming request like hostname/URL/URI for which you want to disable server SSL and set disable server ssl action for it. After applying this LTM policy on the desired vServer, your requirement should be fulfilled.

 

Hope it helps!

AlexS_yb's avatar
AlexS_yb
Icon for Cirrocumulus rankCirrocumulus
Aug 09, 2021

Okay why ltm over irule

 

also so setting in policy is only for that request, interesting.

thanks