Forum Discussion
Jan 11, 2010
HTTPS - direct based on URI - not terminating SSL
I need to direct traffic to a particular pool based on uri contents. I'm NOT terminating SSL.
1-Can I do this without terminating SSL
2-do I need the else statment or wil...
hoolio
Cirrostratus
Jan 11, 2010If you want to inspect or modify the HTTP headers or payload (including the URI), you must decrypt the SSL on LTM. If you need to also use SSL between LTM and the servers, you could decrypt on the clientside using a client SSL profile and re-encrypt on the serverside using a server SSL profile.
If you did decrypt the SSL, you'd want to specify a pool for all cases in the rule when you specify a pool for any case. Here is an example where you don't need to explicitly define the VIPs default pool by name:
when CLIENT_ACCEPTED {
set default_pool [LB::server pool]
}
when HTTP_REQUEST {
if {[HTTP::uri] starts_with "/test/" } {
pool test1_443
} else {
pool $default_pool
}
}
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
