For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

adcounts's avatar
adcounts
Icon for Nimbostratus rankNimbostratus
Aug 17, 2015

iRule to provide CIPHER for specifc hosts

I am running into a situation that I think I can fix with an iRule but don't know how to go about writing it. I need to control the CIPHER that is presented to a Client but want it to be different ba...
application delivery
cipher
devops
iRules
LTM
security
Walter_Kacynski's avatar
Walter_Kacynski
Icon for Cirrostratus rankCirrostratus
Aug 17, 2015

I do this TCL command SSL::profile to change which SSL profile is applied in the CLIENT_ACCEPTED event.

when CLIENT_ACCEPTED {
  if { ([IP::addr [IP::client_addr] equals 10.3.88.229 ]) || ([IP::addr [IP::client_addr] equals 10.3.91.179 ]) } {
    SSL::profile F5Support-ClientSSL
}