For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bizooga's avatar
bizooga
Icon for Nimbostratus rankNimbostratus
Jun 07, 2016

iRule to selectively perform server side encryption based on URL and/or URI

I am currently running SSL offloading on my BIGIP. I was wondering if it would be possible to do server side encryption only for a specific URL and/or URI using an iRule? If so, does anyone have any ...
application delivery
iRules
LTM
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Jun 07, 2016

CLASS_URI is the datagroup that contains the list of URI for which you need server-side SSL encryption. I am using "NOT" logic to disable server-side SSL encryption.

Try this (untested):

when HTTP_REQUEST {
    if { not ([class match [HTTP::uri] eq CLASS_URI]) } {
         SSL::disable serverside
    }

}