Forum Discussion

abi1980_184094's avatar
abi1980_184094
Icon for Nimbostratus rankNimbostratus
Apr 24, 2015

hi

i am using a wildcard VIP to loadbalance 433 , 5222 and 5223 connections   I will using a VIP with a standard :L7 profile . Is it possible to perform SSL briding using an L7 profile for my 443 co...
Hannes_Rapp_162's avatar
Hannes_Rapp_162
Icon for Nacreous rankNacreous
Apr 24, 2015

You can use the iRule below for your wildcard VS. Modify the pool names as needed.

when CLIENT_ACCEPTED {

  switch [TCP::local_port] {
    "5222" {
      pool pool_foo_5222
    }
    "5223" {
      pool pool_foo_5223
    }
    default {
      Reject connections to other TCP ports (security considerations)
      reject
    }
  }

}
abi1980_184094's avatar
abi1980_184094
Icon for Nimbostratus rankNimbostratus
Apr 26, 2015
Hi Hannes This last piece where you have mentioned Reject connections to other TCP ports (security considerations Is this also a part of the I rule or you just mentioned it for clarity