Forum Discussion
kend
Altostratus
AltostratusHTTP iRule
I found this iRule on the DevCentral site at the following URL, http://devcentral.f5.com/wiki/iRule...eader.ashx
It does exactly what I need it to do except work with HTTPS. How would I modify this iRule to work with HTTPS?
hooleylistCirrostratus
Hi Ken,
In order to read the HTTP host header value, you'd need to decrypt the SSL using a client SSL profile. Once you do that and add an HTTP profile to the virtual server, that iRule would work as it is.
Aaron- hooleylistAlso note that that iRule would allow a malicious user to send HTTP traffic to any pool which ends with _pool configured on your LTM. From a security standpoint, it would be a lot safer to create a whitelist of allowed pool names and check that the parsed pool name is part of it before allowing the client to get to the pool. You could do this by defining the allowed pool names in a data group and then using the class command to look up the requested host in the data group.
http://devcentral.f5.com/wiki/iRules.class.ashx
Aaron 
kendI read the link you provided, but I am unclear on how to create the data group itself. Any help would be appreciated.