redirect https request based on hostname

You need to terminate the SSL on the F5 in order to be able to read the host header. Based on your statement, it looks like you are terminating the SSL on the server.

Assuming that you terminate the SSL on the F5, you can use something like this:

when CLIENT_ACCEPTED {
set DEFAULT_POOL [LB::server pool]
}

when HTTP_REQUEST {
if { [HTTP::host] eq "www.abc.com" } {
pool POOL_ABC
} elseif { [HTTP::host] eq "www.xyz.com" } {
pool POOL_XYZ
} else {
pool $DEFAULT_POOL
}
}

Hi,

if you can't do ssl offloading on the bigip, you can rely on the Server Name Indication extension delivered by clients on the SSL handshake.

You can try and modify the irule in this link :

https://devcentral.f5.com/codeshare?sid=717

Hi,

Regarding Odaah irule, you can improve a bit the irule :

when CLIENT_ACCEPTED {
    set DEFAULT_POOL [LB::server pool]
}

when HTTP_REQUEST {
    switch [HTTP::host] {
        "www.abc.com" { 
            pool POOL_ABC
        } 
        "www.xyz.com" {
            pool POOL_XYZ
        }
        default {
            pool $DEFAULT_POOL
        }
    }
}

Hi,

Regarding Odaah irule, you can improve a bit the irule :

when CLIENT_ACCEPTED {
    set DEFAULT_POOL [LB::server pool]
}

when HTTP_REQUEST {
    switch [HTTP::host] {
        "www.abc.com" { 
            pool POOL_ABC
        } 
        "www.xyz.com" {
            pool POOL_XYZ
        }
        default {
            pool $DEFAULT_POOL
        }
    }
}

Hi,

You can use either up to 3 certificates on the client side, but need to play with SNI

here you can found how to configure it : https://support.f5.com/kb/en-us/solutions/public/13000/400/sol13452.html

If you own every domain, you can just order a SAN multi domain certificate with your public CA provider. This way, you can just add one clientssl profile with this certificate that cover both domains.