HTTPS passthrough for a single domain name

If you can use http,ssl profile.

Check out the "https://support.f5.com/csp/article/K13452" document.
This document describes how to configure multiple SNI checks on the same virtual server.

Thank you.

SarahThe only way to do this without the F5 decrypting it at all would be using this article most likely where SNI is used. If SNI is not used you will not be able to do what you are asking.

https://support.f5.com/csp/article/K13452

The reason you are not able to perform the action that most people are recommending without decrypting is because all the iRule options would be looking at the HTTP header which cannot be inspected until after the SSL connection has been decrypted. If SNI is not an option all the time you would have to create a new virtual server with a unique SSL certificate that encompases all FQDNs in question so that you can seperate out the can inspect and cannot inspect by virtual server. The following link might assist you in the future on what happens where when using an iRule.

https://packetpushers.net/wp-content/uploads/2013/11/Event_Order_HTTP_v12.png

Hello,

Unfortunately, I didn't test this scenario before, but you can check the LTM policies that might meet your requirement.

You can create a rule that checks the host in the HTTP request, and the action could be disabling the client and server SSL profiles as the below one. But I think you should take into consideration the profiles used by that virtual server.

Thanks,

Do these servers have the same VIP? 

F5 should check the http request header for domain information check. 

Y.com has another VIP if you want to handle it your way. 



Thank you.