For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ryan_Rowe_79249's avatar
Ryan_Rowe_79249
Icon for Nimbostratus rankNimbostratus
Sep 24, 2009

Rule to use different SSL Profile

I need a rule that when someone comes in to point to a different SSL Cert profile (ie. address a,b,c use serverSSL; all others use client SSL)...would that be possible to do in 1 rules or should I cre...
application delivery
dev
devops
iRules
Ryan_Rowe_79249's avatar
Ryan_Rowe_79249
Icon for Nimbostratus rankNimbostratus
Sep 24, 2009
So I am guessing that this would be what I am looking for: 

 
 when CLIENT_ACCEPTED { 
 if {[matchclass [IP::client_addr] equals $::] }{ 
 SSL::enable clientside 
 SSL::disable serverside 
 } else { 
 SSL::disable clientside 
 SSL::enable serverside 
 } 
 }

This (if I am reading it right) will enable the clientside SSL for a set of ip's and disable the SSL on the serverside. And the other way if not. Then I set both cert profiles in the Virtual Server.

Is this right?