Forum Discussion

Jim_Araujo_1061's avatar
Jim_Araujo_1061
Icon for Nimbostratus rankNimbostratus
Dec 09, 2013

iRule to choose SSL serverside Profile to use based on HTTP_REQUEST

Hi Folks,   I want to think this is possible. I am trying to based on the HTTP_REQUEST and host header, select the serverside connections SSL profile. For example,   If host header is abc.example...
application delivery
design
devops
iRules
security
ssl
ssl profile
Casy_198704's avatar
Casy_198704
Icon for Nimbostratus rankNimbostratus
Sep 01, 2015

This is older but I wanted to ad my notes/comments because I just ran into this. Hope this helps someone out in the future.

I added a default ssl server profile to my VIP. Then updated my primary irule to initially disable the server side ssl for all sites and then renable it on the website that I needed it on.

when CLIENT_ACCEPTED {
SSL::disable serverside
}

when HTTP_REQUEST {
switch [string tolower [HTTP::host]] {
  site1.website.com { pool site1.website.com_pool }
  site2.website.com { pool site2.website.com_pool }
  SSLsite3.website.com { 
   SSL::enable serverside
   pool SSLsite3.website.com_pool 
   }
  site4.website.com { pool site4.website.com_pool }
 default { reject }
}
}