Forum Discussion
Jinshu
Cirrus
Oct 21, 2015Is it possible to write an Irule for SSL exception based on IP address?
Hello,
is it possible to write an irule for except the traffic from specefic source address to pass it with out SSL?
I have an VIP configured with SSL offloading and http to https redirect...
Oct 22, 2015
Question 1:
Yes, by doing something like this:
when HTTP_REQUEST {
if { [IP::addr [IP::client_addr] ne 10.55.22.22] or [IP::addr [IP::client_addr] ne 10.55.22.23] } {
HTTP::redirect https://[getfield [HTTP::host] ":" 1][HTTP::uri]
} else {
pool http_pool
}
}
Note that data group lists are recommended if the list of IP's grows longer.
Question 2:
Yes.
/Patrik
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects