Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

N__197982's avatar
N__197982
Icon for Nimbostratus rankNimbostratus
Sep 18, 2017

iRule to disable Client SSL even when SSL Profile(Client) is selected in the VIP.

Folks, I am looking for an iRule which will help me disable SSL negotiation when the incoming request does not have SSL. The VIP I am going to configure is already going to have SSL certificate in it...
application delivery
irules
stan_piron's avatar
stan_piron
Icon for Cumulonimbus rankCumulonimbus
Sep 18, 2017

Hi,

how can you know it is SSL or not? based on TCP port?

you can use following irule :

when CLIENT_ACCEPTED {
    if { [TCP::local_port] == 80 } {
        SSL::disable
    }
}