Forum Discussion
kend
Altostratus
Apr 21, 2014iRule to Select Pool by HTTPS Header
I am using an iRule I found on this site that selects a pool based on the http header and it works fine. I want to do this for https connections. Can the iRule I am using be modified to work for ht...
Kevin_Stewart
Employee
Apr 21, 2014It still doesn't matter. If you think of the proxy in terms of OSI layers, it might look like this:
Client -> L4 TCP -> L5/6 SSL -> L7 HTTP -> L6/5 SSL -> L4 TCP -> Server
HTTP layer 7 sits between the client side SSL and server side SSL. If you decrypt SSL on the client side, the HTTP traffic will be accessible to the HTTP filter. Whether or not you re-encrypt on the server side doesn't matter, because by that point in the proxy you've already left layer 7.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects