For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Austin_Geraci's avatar
Austin_Geraci
Icon for MVP rankMVP
Jan 11, 2010

HTTPS - direct based on URI - not terminating SSL

I need to direct traffic to a particular pool based on uri contents. I'm NOT terminating SSL.     1-Can I do this without terminating SSL     2-do I need the else statment or wil...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 12, 2010
Good to see you figured out why it was working without a server SSL profile. Yes, you can remove the CLIENT_ACCEPTED part of the iRule if you're hard coding the iRule for both cases. Or you could remove the CLIENT_ACCEPTED event and the else case if you add a OneConnect profile to the VIP. If you're not using SNAT with OneConnect and need exact correlation between client connections and server connections, you can set the OneConnect source mask to 255.255.255.255.

 

 

Aaron