For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Philip_King_719's avatar
Philip_King_719
Icon for Nimbostratus rankNimbostratus
Feb 18, 2016

Redirect SSL connection to new URL before SSL handshake

I did search for this and saw all the articles that this cannot be done, but have someone insisting that it is possible so I'm asking and hoping that the answer has changed since the last articles I ...
application delivery
iRules
LTM
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Feb 18, 2016

Hi,

 

RULE_INIT is an event raised only when irule is updated or configuration is loaded (start of services...)

 

CLIENT_ACCEPTED is raised after TCP handshake. there is no way to answer anything except rejecting connection...

 

The event HTTP_REQUEST is raised after SSL session established. before HTTP_REQUEST event, the bigIP is not able to reply HTTP redirect as the client did not send any request.

 

So the answer is... This is not possible yet(Previously, I told it was not possible to reply with certificate based on the URL requested by browser... and SNI appeared, so nothing is impossible, only not implemented yet in TLS 1.2)