Forum Discussion

Stephen_Anderso's avatar
Stephen_Anderso
Icon for Nimbostratus rankNimbostratus
May 08, 2012

iRule Causing SSL Problems

I created an iRule to handle mobile user detection and redirection. That part works great, but when it's active, SSL no longer works. The browser just waits for a response and never gets one. Not s...
application delivery
dev
devops
iRules
Joel_Moses's avatar
Joel_Moses
Icon for Nimbostratus rankNimbostratus
May 08, 2012
Yes, you'd need to offload the certs to the F5 to have this iRule fire. You can still re-encrypt to the pool if you need to do that, or you can offload SSL to the F5 and talk to the pool in-the-clear.

If you want to keep this rule from firing when applied to an SSL VIP, you could probably do it like this: 


when CLIENT_CONNECTED {
    if { [TCP::local_port] == 443 } {
        event HTTP_REQUEST disable
    } 
}

But you should probably consider offload or just not applying that iRule to the SSL VIP.