Forum Discussion

Matt_60616's avatar
Matt_60616
Icon for Nimbostratus rankNimbostratus
Oct 16, 2009

re direction ssl profiles

Hello, First I am not a programmer. I figure this would be very simple.

 

 

Problem:

 

 

I have a single VIP that handles multiple web sites. These web sites require an ssl cert. They have different domain names. how would I right an i rule to re direct the url to the proper profile.

 

 

Complete so far:

 

 

Created three SSL profiles xyz_wildcard for *.xyz.com, xyz12_wildcard for *.xyz12.com, and xyz123456_wildcard for *.xyz123456.com

 

 

I need an irule that would do the following:

 

 

if url contains *.xyz.com use xyz_wildcard ssl client profile, elseif url contains *.xyz12.com then use xyz12_wildcard ssl client profile, elseif url contains *.xyz123456.com then use xyz123456_wildcard ssl client profile

 

 

 

Can this be done?
dev
devops
iControl
  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Oct 16, 2009
    Unfortunately no, unless you control all the client browsers and can mandate TLS with the SNI option enabled. With TLS-SNI, you could write an iRule to select the appropriate profile. Without it, you won't know what profile you need until after the decryption takes place.