Reading TCP:Payload from a SSL'd Virtual Server

Unfortunately, we don't yet have an SSL::collect, SSL::payload or an SSL_DATA event and that would be needed to inspect the unencrypted data.

 

 

One really crazy work-around would be to connect one switch port to another switch port that's in a second vlan on the front of the BigIP. Then you would create a separate virtual and route the unencrypted connection back through the second virtual where you could then inspect the unencrypted data and load-balance to the final pool. The only drawback is the added latency of going through the BigIP twice.