For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

samigo_81875's avatar
samigo_81875
Icon for Nimbostratus rankNimbostratus
Sep 04, 2013

Mixed SSL/NON-SSL pools

Hello, I have a mixed SSL and NON-SSL pools. I want to have both ClientSSL decryption ending on the LTM and then re-encrypting from LTM to the backend pool member which has SSL enabled. I'm not abl...
application delivery
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Sep 04, 2013

Your iRule is using a -glob switch but you have no glob conditions, so the URIs would have to exactly match. Otherwise the iRule should work. Here's a minor modification:

when HTTP_REQUEST {                
    switch -glob [string tolower [HTTP::uri]] {                              
        "/non-ssl*" {
            SSL::disable serverside
            pool HTTP-pool
        }
        "/ssl*" {
            pool HTTPS-pool
        } 
    }
}