Forum Discussion
iRule to specify SSL-client profile?
Is it possible to specify a ssl profile based on source IP? I have a situation where I want to allow TLS 1.0 from one or two hosts, but disable it for all other connections to a virtual server.
2 Replies
Hi, yes it is possible. Here's the link with examples: https://devcentral.f5.com/wiki/iRules.SSL__profile.ashx
- apatter_352470
Nimbostratus
Something to note that I ran into: if your virtual you are applying this to is in a route domain other than 0, your client ip should also have the route domain in it. Example: if { [IP::addr [IP::client_addr] equals "1.2.3.4%3"]} {
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com