Forum Discussion
JohnMoody
Mar 28, 2022Nimbostratus
Irule direct traffic to external site
Traffic arrives at an existing VIP www.mycompany.com/pay1 When the URI is pay1, I have to send a connection to an external web site "*pay1" { set dest_host [RESOLV::lookup @8.8.8.8 "www.external...
MaximP
Mar 30, 2022Cirrus
I think that this is how the F5 is sending the external traffic, and this gives me an error.curl --header 'Host: www.externalsite.com' https://192.168.1.1/merchant.jsp
What kind of error do you receive?
I guess you have to provide hostname not only in host header but in TLS SNI field too. SNI extention allows server to show proper certificate depends on target hostname.
Here you can find the IRULE to inject SNI into server-side connection https://support.f5.com/csp/article/K41600007
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects