For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Scot_86001's avatar
Scot_86001
Icon for Nimbostratus rankNimbostratus
Feb 21, 2010

iRule Optimization w/ Certificates?

The iRule below functions and performs as it should. I have been told that what I have below may not be efficient or optimized. I am looking to see if anyone can make some suggestions on how to bett...
application delivery
dev
devops
iRules
Scot_86001's avatar
Scot_86001
Icon for Nimbostratus rankNimbostratus
Feb 25, 2010
Aaron, you are correct. When a DoD cert is presented, I want to use the DoD Reponder. When a Verisign ECA is presented, I want to use the ECA responder.

 

I am using one VIP (one virtual server) with multiple responders in an OCSP configuration. Just like your test scenario.

 

 

Option 1 is what I am trying to figure out but am getting no where. I do believe we have the knowledge on this end to figure out which cert is incoming. I would just need to know how to control which responder is called. It sounds to me like we are now breaking the responders out into there own configs and calling them from a different place. if you can place some breadcrumbs, I might be able to follow.