Forum Discussion
Irule to insert SNI based on Pool member
This is based purely on this link CloudDocs Wiki: LB::Server and an server ssl profile irule I saw a year back, but forgot the source of. I do not have any experience with this irule, nor have I tested it.
You could create multiple server ssl profiles each with it's own Server Name value.
when LB_SELECTED {
log local0. "LB_SELECTED: Connected to [LB::server name] [LB::server addr]"
switch [LB::server name] {
"abcd.domain.local" { SSL::profile abcd_serverssl }
"efgh.domain.local" { SSL::profile efgh_serverssl }
}
It is possible that the SSL::profile command can't be utilised in the LB_SELCTED event, in which case you'll have to move it to SERVER_CONNECTED (which is where the example I saw used it).
Thank you .
I tried using above IRule but its selecting Pool name instead of pool member fqdn.
Thanks
Senthil
- jaikumar_f5Dec 01, 2019
Noctilucent
If you read the Wiki, thats what it says,
LB::server name¶ returns a Tcl list with pool, pool member address and port. If no server was selected yet or all servers are down, returns default pool name only.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com