Forum Discussion

Joe_5599_134300's avatar
Joe_5599_134300
Icon for Nimbostratus rankNimbostratus
Jan 31, 2014

HTTPS VS with iRule Pool Selection via URI - Some Non Serverside SSL and Some Serverside SSL

The iRule is working ok for the non serverside SSL pools but I can't get the two pools working with serverside SSL iRule. They do work when I assign the single pool resource and serverside SSL profile to the VS. Do I need to add the serverside SSL profile in the iRule?

when HTTP_REQUEST { switch -glob [HTTP::uri] { "/appsite1" { pool appsite1.test.testsite.com.com-8080 } "/appsite2" { pool appsite2.test.testsite.com.com-8081 } "/appsite3" { pool appsite3.test.testsite.com.com-8085 } "/appsite4" { pool appsite4.test.testsite.com.com-9080 }

 

appsite5" { SSL:enable serverside

 

pool appsite5.test.testsite.com.com-443 } "/appsite6" { SSL:enable serverside pool appsite6.test.testsite.com.com-8443 } "/*" { pool appsite7.test.testsite.com.com-80
    }
}

}

1 Reply

  • You should basically do the exact opposite - assign a server SSL profile and disable it in the iRule for non-SSL pools.

    when HTTP_REQUEST { 
        switch -glob [string tolower [HTTP::uri]] { 
            "/appsite1*" {
                SSL::disable serverside
                pool appsite1.test.testsite.com.com-8080 
            } 
            "/appsite2*" { 
                SSL::disable serverside
                pool appsite2.test.testsite.com.com-8081 
            } 
            "/appsite3*" { 
                SSL::disable serverside
                pool appsite3.test.testsite.com.com-8085 
            } 
            "/appsite4*" { 
                SSL::disable serverside
                pool appsite4.test.testsite.com.com-9080 
            }
            "/appsite5*" { 
                pool appsite5.test.testsite.com.com-443 
            } "/appsite6*" { 
                pool appsite6.test.testsite.com.com-8443 
            } 
            default { 
                pool appsite7.test.testsite.com.com-80
            }
        }
    }