For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

John_Stevensen's avatar
John_Stevensen
Icon for Nimbostratus rankNimbostratus
Oct 30, 2012

Incoming 443 Passthru LTM and use iRule to redirect to pool

Client connections come in SSL 443; needs to pass-thru the LTM with no modification/terminating.   The Clients SSL session needs to terminate directly on the server. The LTM cannot touch the ses...
application delivery
dev
devops
iRules
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Oct 30, 2012

You can't look at the HTTP URI as you are not terminating the SSL on the F5. All the F5 can see is encrypted SSL data. You have two options here;

 

 

1) Terminate the SSL on the F5 using an SSLClient profile. You can re-encrypt to the server using a SSLServer profile if necessary.

 

2) Use the ProxySSL feature, although I'm unsure if it's appropriate in this case: http://support.f5.com/kb/en-us/solutions/public/13000/300/sol13385.html