Forum Discussion
Is it possible to enable ssl profile on the irule?
Hi,
I'm kind of new managing Big Ip and pretty sure I'm not using the right approach for this, but at this point I ran out of ideas,
I need to set up a VIP in a random port let's say port 123456, and this VIP should accept http and https traffic.
I set the VIP to have a SSL profile and this iRule.
when CLIENT_ACCEPTED {
switch -glob [TCP::local_port] {
123456 { pool super_awesome_pool_123456 }
default { discard }
}
}
This set up works with https but doesn't work on http.
If I remove the ssl profile from the VIP works on http but doesn't on https so the question is,
Is it possible to enable ssl profile on the irule? or make the VIP to accept both http and https?
thanks
Hi,
it can be done, assign the clientssl profile and check the Non-SSL Connections option. Have a look at this article:
https://devcentral.f5.com/s/articles/handling-http-requests-on-an-https-virtual-server-31668
Best Regards,
Oscar Pucheta
https://www.australtech.net
https://www.linkedin.com/in/npucheta/
Hi,
it can be done, assign the clientssl profile and check the Non-SSL Connections option. Have a look at this article:
https://devcentral.f5.com/s/articles/handling-http-requests-on-an-https-virtual-server-31668
Best Regards,
Oscar Pucheta
https://www.australtech.net
https://www.linkedin.com/in/npucheta/
- Miriam447Nimbostratus
Just what I needed, worked a treat, thank you! diebestetest
- Leonel_ReyesNimbostratus
Thanks guys for your answers, a solution was possible as suggested. Thanks again!
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com