Forum Discussion
AlexDeMarco
Nimbostratus
NimbostratusRe-encrypt based on request
Hello,
We are terminating SSL at the F5/VIP level.. However, I have some pages on my IIS server that need to see SSL in the request in order to work properly. I do not want to re-encypt everyt...
What_Lies_Bene1
Cirrostratus
CirrostratusIf you assign a ServerSSL profile to the VS you can use this;
when HTTP_REQUEST {
set use_ssl 0
switch -glob [string tolower [HTTP::uri]] {
"/mysecureapp1*" -
"/anothersecureapp2*" {
set use_ssl 1
snat automap
pool IIS_HTTPS_Pool }
If HTTP uri is neither of the above, take the default action below
default {
set use_ssl 0
pool something?
snat something?
}
}
}
when SERVER_CONNECTED
if { $use_ssl == 0 } {
SSL::disable
}
}
