For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

T_Rajneesh's avatar
T_Rajneesh
Icon for Nimbostratus rankNimbostratus
Jun 27, 2019

Query on http profile in Virtual Server.

hi, just to give background, Presently the Virtual server is listening on port 443 and HTTP profile - none selected.   I wanted to block particular string in url. I need to apply this i-rule to t...
application delivery
iRules
LTM
David_M's avatar
David_M
Icon for Cirrostratus rankCirrostratus
Sep 04, 2019

If you add an http profile to a VIP on 443 then you must also add a client ssl profile.

 

This puts your bigip in a MITM mode means it can decrypt the encrypted packets.

 

Depending on your backend you might have to use a serverssl profile too if the backend is on 443 as well, which I am guessing it is because when you create a VIP on 443 without a http profile, its acting as a SSL bridge with your backend server which also needs to be on 443. Means your bigip cannot see the encrypted data.