Forum Discussion
Brad_146558
Nimbostratus
NimbostratusHTTP_REQUEST switch Question.
So I'm looking at consolidating IP addresses with an iRule. The iRule works great, but one of the follow-up questions I got from other people in the department is can you do SSL with that iRule, I dr...
Two things. Yes, you can absolutly use "virtual " rather than "pool " if you have a virtual that is set up to do what you want.
That said, you have to terminate SSL in order to see the HTTP::host value. Are you talking about treating the back end differently? Server Side SSL? Server side SSL and Oneconnect, NTLM profiles and iRules are all really good reasons to use Virtuals like this.
As for terminating SSL for multiple Hosts on the same VIP, the simple answer is to build your SSL cert with Subject Alt Names. That way the same cert will be good for a number of different Hosts.
Brad_146558Nimbostratus
Nimbostratuswhen HTTP_REQUEST {
switch -glob [string tolower [HTTP::host]] {
"example1.com" { pool example1_pool }
"example2.com" { pool example2_pool }
"example3.com" { pool example3_pool }
default { pool pool_webservers}
}
}
Hopefully this format pastes a little better.