For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jonathan_Galent's avatar
Jonathan_Galent
Icon for Cirrus rankCirrus
Sep 17, 2016

HTTP Stream Profile not working with SSL Client Profile (offloading)

I have a LTM virtual server proxying (standard reverse) a simple http webserver. I have setup a stream profile to replace content and have verified that it works. When I add an SSL Client Profile to the virtual server to enable SSL, the stream profile expression no longer works, but the page is rendered properly over SSL. It seems like maybe the stream expression matching takes place after the response is already encrypted perhaps (although again, the page renders fine?) Does this mean I need two virtual servers, one to do the stream profile and one to terminate ssl?

 

application delivery
LTM

1 Reply

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Sep 17, 2016

    If it works in HTTP, it should work for HTTPS as long as you terminate the SSL on the F5.

     

    Either there is some difference in the headers being used like that of the "Accept-Encoding" header between HTTP & HTTPS or there is a bug in the code version which may require a support ticket for F5 Engineers to confirm & possibly resolve in another code version.

     

    Did you check out the recommendations section of SOL8115 ?