Forum Discussion
DCP
Nimbostratus
Oct 06, 2014iRule to Pool supporting SSL with differnt Host name
We have an environment that required users to hit VIP that uses F5 to offload SSL. If users request for /login, we need to rewrite host information and re-encrypt traffic back to pool using certifica...
Kevin_Stewart
Employee
Oct 07, 2014If you're referring to simply adding a server SSL profile for when the request flow has to go to the server2 pool, the easiest method is to apply the server SSL profile to the virtual server configuration and disable it for the regular traffic. You can't use the SSL::enable and SSL::disable commands unless an SSL profile is applied to the VIP. Something like this:
when CLIENT_ACCEPTED {
set default_pool [LB::server pool]
}
when HTTP_REQUEST {
switch -glob [string tolower [HTTP::uri]] {
"/login/login.html" {
pool login_pool
HTTP::header replace Host "server2.mycompany.com"
}
default {
pool default_pool
SSL::disable serverside
}
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects