Forum Discussion

dan_19334's avatar
dan_19334
Icon for Nimbostratus rankNimbostratus
Jun 02, 2009

iRule SSL Client

We have an SSL only VIP and have a need to access it from an iRule associated with another VIP. Normally we just use the virtual or node command to connect to another VIP on the LTM, but that doesn't work because this particular VIP requires SSL.

 

 

Is it possible within an iRule to be an SSL Client and connect to an SSL Server?

 

 

Thanks,

 

-Dan

 

application delivery
dev
devops
iRules
  • spark_86682's avatar
    spark_86682
    Historic F5 Account
    Jun 03, 2009
    You should be able to add a serverssl profile to your vip, and then add some code that looks like:

     

     

     
 when SERVER_CONNECTED { 
   if { $need_ssl_only_vip } { 
     SSL::enable 
     virtual ssl_only_vip 
   } else { 
     SSL::disable 
   } 
 }

     

     

    I haven't tried this, but it should work.
  • dan_19334's avatar
    dan_19334
    Icon for Nimbostratus rankNimbostratus
    Jun 04, 2009
    Thanks, the SERVER_CONNECTED code looks promising I will test that out and report back. The codeshare one to me looks like it is how to handle this creatively on the receiving end...

     

     

    -Dan