Forum Discussion
Karthick1
Cirrus
CirrusIrule to match SNI
I have configured one vs with multiple ssl profile and one ssl profile marked as default SNI, I need to write irule to match SNI ( during client hello ) only for assigned ssl profile rest it should...
Hi Karthick,
when HTTP_REQUEST {
switch [HTTP::host] {
"abc.com" -
"www.abc.com" -
"ccc.com" -
"www.ccc.com" { }
default { reject }
}
}
Karthick1Cirrus
CirrusDear Eaa,
Thanks for your comments, yes the same irule which you have shared i have done using class match.
but i need to match using SNI during client Hello. I tried using this cmd "SSL::sni name " but it is not working.
Hi Karthick,
Can you try with [SSL:extension sni name] ?
when CLIENTSSL_CLIENTHELLO { if { [SSL:extension sni name] ends_with "abc.com" } { # .. } }
