Forum Discussion
ukstin
Nimbostratus
NimbostratusRedirect pool to HTTPS
Hi,
I´ve made the following i-rule:
when HTTP_REQUEST {
set parametro [HTTP::uri]
if { ([string tolower $parametro] contains "abcd/") } {
pool pool_abcd
} elseif { ([string tolower $parametro] contains "efgh/") } {
pool pool_efgh
} elseif { ([string tolower $parametro] contains "ijkl/") } {
pool pool_ijkl
} else {
pool pool_default
}
}It works but I need to apply it to a SSL Virtual Server, but there is no http profile apllied and bigip doesn´t let me apply this i-rule on this VS.
The certificate is not on the box, it´s on the webserver, so I do not have an SSL profile applied too. And if I apply any http profile the connection doesn´t work, and I cannot enter in the website.
There is any event different from HTTP_REQUEST that can I use to do this selection of pool?
Regards.
2 Replies
- If you need the BIG-IP to do pool selection based on the URI of the HTTP request, then the BIG-IP will need to decrypt the SSL stream to access the URI, and the only way for that to happen is if you install the certificate and key on the BIG-IP. There's no way to access any part of the HTTP request otherwise. Once you do that, you can apply an HTTP profile and use this iRule just as on a non-SSL virtual server. If you need the data to be encrypted between the BIG-IP and the server, then you can also apply a serverssl profile to accomplish this.
Hope this helps! 
ukstinThanks spark,
I´ve installed the certificate and create a client and server ssl profile, so this way I could apply an http profile and consequently the i-rule.
thanks for your help.
