Forum Discussion

Ben_Wilson_2412's avatar
Ben_Wilson_2412
Icon for Cirrus rankCirrus
Oct 02, 2013

How to use another VIPs settings after SSL termination?

I think I saw something about this before, but can't find it.

 

We're in the situation of needing to use 2 separate SSL certs, for the same application. To try and keep things simple (because these apps change a lot) I'd like to set up the second VIP to forward to the "main" VIP after SSL. So all the iRules, profiles and load balancing would be inherited from the main VIP.

 

Is there an easy way to just forward all traffic to another VIP on the same appliance? I working on some alternatives that allow combing the certs, but that's not possible right now.

 

Thanks! Ben

 

application delivery
devops
iRules

1 Reply

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Oct 02, 2013

    I'm assuming you are wanting to use the vip targeting vip solution? Simple:

    priority 999
when CLIENT_ACCEPTED {
  virtual /Common/v.myvip
}

    I like to set a super low (higher number, don't start... :)) priority so all the other rules on the front vip are processed before this executes.

    Also, in later versions, it is possible to attach more than one SSL profile to a virtual and use the server name identifier feature in TLS. Note that this is not supported in older browsers, but all modern browsers should be fine.