For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bigipjr28_13978's avatar
bigipjr28_13978
Icon for Nimbostratus rankNimbostratus
Sep 04, 2014

irule for multiple webservers

Hello,   I was wondering if there was such an irule or another solution out there that would send traffic coming in from an external ip and then directing them the appropriate pool. The pool cont...
cnames
irule
irule logic
redirct
web servers
Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Sep 05, 2014

You can do the same in HTTP classes or HTTP policy in 11.4 or later without needing an iRule.

 

If you have to deal with SSL then you will need to decrypt it for the BIGIP to see the headers. Using either a wildcard SSL certificate if they are in the the same domain or import all the certificates & keys. Then create a client SSL profile which includes those certificates and turn on Server Name Indication (SNI). Attach the profile to your virtual and go from there.

 

bigipjr28_13978's avatar
bigipjr28_13978
Icon for Nimbostratus rankNimbostratus
Sep 09, 2014
Yeah the application does use an ssl cert..how would I go about creating an irule then ? how would I decrypt it? also the fqdn in the above snippet is that the virtual name of the VS ? Might seem like a silly question I have only done one irule that was attached to a single vip..if a vip already has an irule associated it include multiple irules..so basically can vip have more then one irule assoociated w/it ? Thanks again guys