For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Austin_Geraci's avatar
Austin_Geraci
Icon for MVP rankMVP
Jan 11, 2010

HTTPS - direct based on URI - not terminating SSL

I need to direct traffic to a particular pool based on uri contents. I'm NOT terminating SSL.     1-Can I do this without terminating SSL     2-do I need the else statment or wil...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 11, 2010
I would expect the iRule to work with a client and server SSL profile enabled on the VIP with the VIP and pool members defined on port 443. If you remove the server SSL profile, the iRule should only work if you configure a pool on port 80 (or if the servers allow non-SSL requests on port 443).

 

 

The VIP's default pool will come into play if the rule doesn't specify a pool. You can either enable a OneConnect profile and not specify a pool in all cases, or specify a pool in all cases. See this post for details:

 

 

iRule Editor can't find default_pool

 

http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=33921&ptarget=57229

 

 

Aaron