For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nastymatt_11986's avatar
nastymatt_11986
Icon for Nimbostratus rankNimbostratus
Feb 21, 2013

irule to a pool using SSL

What I am trying to achieve is to send traffic to a specific pool based on the uri. Which works fine on http, the issue I have is when I use the irule on https.   I have to assign an http profile ...
application delivery
dev
devops
iRules
nastymatt_11986's avatar
nastymatt_11986
Icon for Nimbostratus rankNimbostratus
Feb 21, 2013
Correct KS.. the BIG-IP is listening on 443 and forwards to 443. If I add client and server ssl profiles I get the trust error. The problem is these are public web sites being served so can not have trust issues :(

 

 

What I am trying to do is direct traffic to specific pools based on the uri. We have migrated part of the site to a new server, when we move it all then this will not be a problem as all traffic can be forwarded (saying that.. this has prompted me to seriously consider ssl offloading) and no uri check will happen.

 

 

this is my irule (all names changed to protect the innocent).. so if you hit www.mysite.com/abc you will go to one set of servers.. anything else you hit the originals.

 

 

when HTTP_REQUEST {

 

 

set uri [string tolower [HTTP::uri]]

 

 

if { $uri starts_with "/abc" } {

 

 

pool W_APool_443

 

 

} else { pool W_BPool_443 }

 

}