iRule "Sorry server" pool change from SSL to non-SSL?

You can specify a fallback host in the HTTP profile attached to your virtual server. It would be used in the case that no pool members were available.

The Fallback Host option would end up sending a redirect to the client's browser, would it not? We are trying to serve up the Sorry page without any redirect - just show it instead of the normal page.

Thank you!!!

can we just disable ssl on serverside?

e.g.

 config

root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm virtual bar
ltm virtual bar {
    destination 172.28.24.10:443
    ip-protocol tcp
    mask 255.255.255.255
    pool foo443
    profiles {
        clientssl {
            context clientside
        }
        http { }
        serverssl {
            context serverside
        }
        tcp { }
    }
    rules {
        qux
    }
    source 0.0.0.0/0
    source-address-translation {
        type automap
    }
    vs-index 6
}
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm pool foo443
ltm pool foo443 {
    members {
        200.200.200.101:443 {
            address 200.200.200.101
        }
    }
}
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm pool sorry80
ltm pool sorry80 {
    members {
        200.200.200.111:80 {
            address 200.200.200.111
        }
    }
}
root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list ltm rule qux
ltm rule qux {
    when HTTP_REQUEST {
  if { [active_members [LB::server pool]] <= 0 } {
    SSL::disable serverside
    pool sorry80
  }
}
}

 pool443 is up

[root@ve11a:Active:In Sync] ~  curl -k https://172.28.24.10
This is 101 host.

 pool443 is down

[root@ve11a:Active:In Sync] ~  tail -f /var/log/ltm
Jan 22 23:40:14 ve11a notice mcpd[6957]: 01070638:5: Pool /Common/foo443 member /Common/200.200.200.101:443 monitor status down. [ /Common/fake: down ]  [ was unchecked for 0hr:7mins:54sec ]
Jan 22 23:40:14 ve11a err tmm[14419]: 01010028:3: No members available for pool /Common/foo443
Jan 22 23:40:14 ve11a err tmm1[14419]: 01010028:3: No members available for pool /Common/foo443

[root@ve11a:Active:In Sync] ~  curl -k https://172.28.24.10
This is 111 host.

That was exactly the right answer nitass - thank you!!!

One twist on this - is it also possible to put up a "sorry-sorry" static HTML served right from the LTM in the case of both failed regular pool and failed sorry pool?

is it also possible to put up a "sorry-sorry" static HTML served right from the LTM in the case of both failed regular pool and failed sorry pool?

yes, it is definitely possible. :)

v11.1–External File Access from iRules via iFiles by Jason Rahm

offloading content with ifiles