Forum Discussion

Leonel_Reyes's avatar
Leonel_Reyes
Icon for Nimbostratus rankNimbostratus
May 28, 2019

Is it possible to enable ssl profile on the irule?

Hi,

I'm kind of new managing Big Ip and pretty sure I'm not using the right approach for this, but at this point I ran out of ideas,

I need to set up a VIP in a random port let's say port 123456, and this VIP should accept http and https traffic.

I set the VIP to have a SSL profile and this iRule.

when CLIENT_ACCEPTED {
    switch -glob [TCP::local_port] {
        123456   { pool super_awesome_pool_123456 }
        default  { discard }
    }
}

This set up works with https but doesn't work on http.

If I remove the ssl profile from the VIP works on http but doesn't on https so the question is,

Is it possible to enable ssl profile on the irule? or make the VIP to accept both http and https?

thanks