Forum Discussion

John_Lennon_457's avatar
John_Lennon_457
Icon for Nimbostratus rankNimbostratus
Nov 30, 2010

ProxyPass iRule and pools with both HTTP and HTTPS webservers

I'm using the ProxyPass v10 iRule that Kirk wrote to redirect to a pool based on URI. The webservers use HTTP except for one that requires HTTPS. All traffic comes in to a single host IP, same FQHN bu...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Dec 02, 2010
Hi John,

If you want to specify a server SSL profile in an iRule, there must be a (any) server SSL profile on the virtual server. The ProxyPass iRule does a lookup for the currently selected pool in the ProxyPassSSLProfiles datagroup. If a match is not found, then the server SSL profile is disabled using SSL::disable. So I think this should work for your scenario. 


   set profilename [findclass $pool ProxyPassSSLProfiles " "]

   if {$profilename eq ""} { 
      if { [PROFILE::exists serverssl] == 1} {
          Hide this command from the iRule parser (in case no serverssl profile is applied) 
         set disable "SSL::disable serverside" 
         catch {eval $disable}
      }
      return 
   }

Aaron