For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Omer_Twito_2618's avatar
Omer_Twito_2618
Icon for Nimbostratus rankNimbostratus
Jun 21, 2016

Irule to redirect 1 virtual server to multiple pools

Hi, In our lab enviornment we have a virtual server that function as a reverse proxy and configured to accept TCP profile only because we are using a self signed certificate. Today I got a request ...
devops
iRules
tatmotiv's avatar
tatmotiv
Icon for Cirrostratus rankCirrostratus
Jun 21, 2016

Why would a self signed certificate prevent you to add an http profile to the virtual?

 

Did you mean you need different certs depending on the host header in the request? If that's the case, you could try to use SNI (server name indication) in the clientssl profile on your Big IP and thus be able to deliver several certificates from the same ip/port depending on the host being requested. Then, you can also deploy an http profile and have an iRule react on HTTP host / URI or such.

 

See here for details about SNI.

 

HTH

 

Martin