For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MABSJ's avatar
MABSJ
Icon for Nimbostratus rankNimbostratus
May 30, 2024

Query a pool according to the hostname without opening the encryption

Hello   In an https connection the only thing that can be seen is the IP and hostname. How can I choose the pool to send a connection to depending on the hostname without opening the encryption?  ...
security
zamroni777's avatar
zamroni777
Icon for MVP rankMVP
May 30, 2024

adding to Amine_Kadimi ,

most clients send intended server hostname during SSL session setup, so that SSL server can response with proper server's certificate.
this method allows same server serves mutiple SSL hostnames using different certificate for each hostname.
the sample config above actually reads that hostname.

you can read more about TLS SNI here:
https://www.cloudflare.com/learning/ssl/what-is-sni/