Forum Discussion

Tony_102787's avatar
Tony_102787
Icon for Nimbostratus rankNimbostratus
Jun 08, 2015

How can F5 check outgoing HTTPS URL site for ISP redirection?

Hi, just want to ask how can F5 check outgoing ( LAN > Internet ) HTTPS URL site for ISP redirection?

 

We asked this questions because we would like our outgoing OFFICE 365 traffic to be redirected to specific ISP.

 

We tried an iRule using Datagroup ( w/ OFC365 ip/network address list ) but it is not practical to use this solution because there's a lot of ip address being used.

 

Hoping for your advise. Thanks.

 

1 Reply

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Jun 14, 2015

    i wanted to say it wouldn't be possible without having to break open SSL and that is no a clean action for all out going traffic.

     

    but we no have the SNI header in SSL traffic which tells you which host is called, it seems this isn't included in irules yet so that makes things more complicated, but this should get you on your way.

     

    https://devcentral.f5.com/questions/selective-https-proxy-with-sni