Forum Discussion
NimbostratusIrule to use respective client-ssl profiles for the multiple applications hosted on the same VIP.
Hello Team,
We have an existing application setup running with multiple applications using the same VIP 1.2.3.4.
eg: a.xyz.com - 1.2.3.4. - Pool A b.xyz.com - 1.2.3.4. - Pool B c.xyz.com - 1.2.3.4. - Pool C d.xyz.com - 1.2.3.4. - Pool D
Now we are planning to use SSL connection for the applications to use individual respective certs instead of a global or domain certificate. (*.xyz.com), is this possible to configure using irule , to use respective client-ssl profile for the respective applications configured in the same VIP ?
- SAM
1 Reply
- nitass
Employee
is this possible to configure using irule , to use respective client-ssl profile for the respective applications configured in the same VIP ?
isn't it done by sni?
sol13452: Configuring a virtual server to serve multiple HTTPS sites using the TLS Server Name Indication feature
https://support.f5.com/kb/en-us/solutions/public/13000/400/sol13452.htmlfor selecting pool based on host header, you can use irule or local traffic policies.
sol9800: Using an iRule to load balance HTTP requests to multiple pools
https://support.f5.com/kb/en-us/solutions/public/9000/800/sol9800.htmlsol15097: Using the Local Traffic Policies feature to load balance HTTP requests to multiple pools
https://support.f5.com/kb/en-us/solutions/public/15000/000/sol15097.html
