For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jonathon_Page's avatar
Jonathon_Page
Icon for Nimbostratus rankNimbostratus
Jan 20, 2017

HTTPS LTM iRule for overloading a VIP - HTTPS web server internally not encrypting

Hi, I've used the articles on here to create a single VIP with an iRule to switch pools using the URL::host value, This has been working great for internal services that are HTTP. I'm trying to ...
application delivery
big-ip ltm
irule
iRules
LTM
security
ssltls
Jonathon_Page's avatar
Jonathon_Page
Icon for Nimbostratus rankNimbostratus
Jan 20, 2017

Hi.

 

I found my answer through playing. I had the serverssl profile enabled on the virtual server, but I had the irule set up to disable the encryption for the internal http. I read an article https://devcentral.f5.com/questions/what-is-appropriate-way-to-use-ssldisable-serverside-sslenable-serverside and it indicated that I should disable the SSL in the CLIENT_ACCEPTED and do the SSL::enable server before selecting the pool.

 

The system appears to be working now.