Forum Discussion

helm123_141710's avatar
helm123_141710
Icon for Nimbostratus rankNimbostratus
Jan 28, 2015

irule with different SSL profiles depending on the pool.

Converting another load balancing device to the F5 and have a question that I just can't seem to find the answer for. I have an HTTPS virtual server that going to load balance different pools based ...
application delivery
devops
iRules
StephanManthey's avatar
StephanManthey
Icon for MVP rankMVP
Jan 28, 2015

Hi helm123,

 

you can create multiple client-ssl profiles containing specific cert/key combinations and assign them all to the same virtual server.

 

If the client supports SNI (server name indication; an extension available with SSL/TLS) the client provides in the hello an attribute containing the expected common name in the server certificate.

 

This way the virtual server can pick the proper certificate and the client won´t throw an error message due to certificate mismatch.

 

Thanks, Stephan