For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

TJ_Vreugdenhil's avatar
TJ_Vreugdenhil
Icon for Cirrus rankCirrus
Mar 14, 2012

LB HTTPS Reverse Proxy

It it possible to use the existing HTTP server addresses below: http://www.domain.com/online/index.cfm?template=text http://www.domain.com/online/index.cfm?template=receive_alerts http://w...
application delivery
dev
devops
iRules
koenning_107182's avatar
koenning_107182
Icon for Nimbostratus rankNimbostratus
Mar 14, 2012
Hi,

in principle, you could disable the serverside profile with 

 SSL::disable [clientside | serverside]

https://devcentral.f5.com/wiki/iRules.ssl__disable.ashx

This disables ssl per connection, not per request, which would not be desired and in your case would probably cause failures.

If you really want to get away with the same vs, you could select a different pool based on the request, and then disable serverssl for that virtual.

If you would create 24 new HTTPS VIPS, would you not need to have new Virtual IPs as well, if you would stay on standard ports ? And then, would you not need new certs, if you are on a public DNS infrastructure ?

Christian