For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

N__197982's avatar
N__197982
Icon for Nimbostratus rankNimbostratus
Sep 18, 2017

iRule to disable Client SSL even when SSL Profile(Client) is selected in the VIP.

Folks, I am looking for an iRule which will help me disable SSL negotiation when the incoming request does not have SSL. The VIP I am going to configure is already going to have SSL certificate in it...
application delivery
iRules
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Sep 18, 2017

Hi,

how can you know it is SSL or not? based on TCP port?

you can use following irule :

when CLIENT_ACCEPTED {
    if { [TCP::local_port] == 80 } {
        SSL::disable
    }
}