Forum Discussion
jwhitepnv_12764
Nimbostratus
Nov 10, 2004Rule to support HTTP and HTTPS in the same VIP?
I have a legacy application that uses http over port 443 (no encryption) and I want to add HTTPS on that same IP and port. Can I create a rule that will listen for something like the Client SSL Hello ...
bl0ndie_127134
Nov 10, 2004Historic F5 Account
Yes, BigIP gives you the ability to inspect the request data and selectively enable/disable SSL encryption. In this example, we check to see if the first 5 bytes of data matches the start of some of the well known HTTP requests and use that information to enable or disable SSL.
NOTE: There have been some fixes to the TCP::collect rule that will be available on 9.02 that you will need for this rule to function properly.
class http_methods {
"GET”
“POST”
“HEAD”
“PUT”
}
when CLIENT_ACCEPTED {
TCP::collect 5
}
when CLIENT_DATA {
if { [matchclass [TCP::payload] starts_with $::http_methods] } {
SSL::disable
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects