Forum Discussion
Nathan_McKay_67
Nimbostratus
Jan 03, 2007Possible to selectively enable/disable SSL and HTTP profiles?
Hi,
I am attempting to selectively enable client-side SSL processing based on a condition - pool member availability in this case.
Normally the virtual server in question will perf...
hoolio
Cirrostratus
Jan 04, 2007I don't believe you can dynamically add a profile to a virtual server. You can only disable/enable a profile that is already associated. I don't think there are any plans of changing this.
Are you trying to decrypt the HTTPS traffic and send a redirect if the pool is down, but otherwise leave the HTTPS traffic encrypted and load balance it to the pool?
If so, I think the logic would be something like this:
when RULE_INIT {
set mypool "some_pool"
set myredir "http://example.com/error.html"
}
when CLIENT_ACCEPTED {
if { [active_members $mypool] > 1 } {
SSL::disable
HTTP::disable
pool $mypool
}
}
when HTTP_REQUEST {
HTTP::redirect $myredir
}
This assumes that you have client SSL and HTTP profiles associated with the virtual server.
I haven't tested this but it seems like the logic is okay. If it doesn't work, can you add logging to each event to see what is being triggered when there are nodes available in the pool compared with what happens when the nodes are down?
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects