Possibility of the Dynamic hostname in the SNI field?

Question

Hello Guys,&nbsp;
Can somebody please help me to know if I can have a dynamic host address in the serverssl profile with which I can enable the SNI on it.
SO in short I have a requirement in which the hostname will be changing (****.example.com) all the time but it needs to be there in the SNI field. As far as I know, we can have a static entry in its filed so not sure if the dynamic can be placed in it or not.&nbsp;
Really appreciate your time and help.&nbsp;
Thanks and regards,
R&nbsp;

root44 · Answer

Can anyone please help here?&nbsp;

stanislas_piro2 · Answer

Hi,&nbsp;
You can use the code provided by Kai Wilke in this thread&nbsp;
it allow to get Servername value from client side and insert it to server side.&nbsp;

kai_wilke · Answer

Hi Root,&nbsp;
beside of the post mentioned by Stanislas you could also take a look to the two sSNI related nippets I've pasted to CodeShare.&nbsp;
Client side to server side SNI relay iRule &nbsp;
https://devcentral.f5.com/codeshare/client-side-to-server-side-sni-relay-irule-967&nbsp;
Serverside SNI injection iRule&nbsp;
https://devcentral.f5.com/codeshare/serverside-sni-injection-irule-968&nbsp;
Since the external/internal HOST-name differs in your scenario, the Serverside SNI injection iRule will perfectly solve your problem.&nbsp;
Cheers, Kai&nbsp;

Forum Discussion

Possibility of the Dynamic hostname in the SNI field?

Recent Discussions

Why does WAF block HTTP OPTION method

Rewriting Location Header in iRule

HA Configuration (One in primary and One in DR)

Sending a trusted certificate to server

APM issue errorcode=19

Related Content

JA4 Part 2: Detecting and Mitigating Based on Dynamic JA4 Reputation

Regex for dynamic URI

Improve BIG-IP APM VPN speed with TLS dynamic record size

Dynamic url redirection feasibility

BIG-IP to Azure Dynamic IPsec Tunneling