For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Scot_86001's avatar
Scot_86001
Icon for Nimbostratus rankNimbostratus
Feb 21, 2010

iRule Optimization w/ Certificates?

The iRule below functions and performs as it should. I have been told that what I have below may not be efficient or optimized. I am looking to see if anyone can make some suggestions on how to bett...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 23, 2010
Hi Scot,

 

 

I think it's more reasonable to replace the default OCSP auth rule on the auth profile with a custom rule versus trying to use a separate custom rule on the VIP along with the default auth rule on the auth profile.

 

 

Do you want to load balance the OCSP servers? If so, you can follow the sample configuration in the Codeshare example which shows how to configure an "internal" virtual server pointing to a pool of OCSP servers. If that's not what you're trying to do, can you rephrase the question?

 

 

Also, I wouldn't bother trying to test the Codeshare iRule unless you've been able to upgrade to 9.4.8HF3. I think you'll get iRule validation errors in previous versions of 9.4.x.

 

 

Thanks,

 

Aaron