For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

N__197982's avatar
N__197982
Icon for Nimbostratus rankNimbostratus
Sep 18, 2017

iRule to disable Client SSL even when SSL Profile(Client) is selected in the VIP.

Folks, I am looking for an iRule which will help me disable SSL negotiation when the incoming request does not have SSL. The VIP I am going to configure is already going to have SSL certificate in it...
application delivery
iRules
KeesvandenBos's avatar
KeesvandenBos
Icon for MVP rankMVP
Sep 18, 2017

Why don't you create two VIP's with the same destination IP address? One with port 443 and a client ssl profile and one with port any and no client ssl profile.

 

SSL sessions will match the 443 vip, all the other non-ssl sessions the any VIP.

 

Cheers,

 

Kees