F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Ron_Adams_11068's avatar
Ron_Adams_11068
Icon for Nimbostratus rankNimbostratus
Jan 12, 2006

Select among clientssl profiles

Need help with 9.2 iRule syntax to select a clientssl profile other than the default assigned to the virtual server?     A previous post returned this statement:   "Unfortunately, you're go...
application delivery
dev
devops
iRules
Joe_Pruitt's avatar
Joe_Pruitt
Feb 08, 2006
Looks like we need to update that sample code. To be able to look at the hostname which is part of the HTTP payload, the content must be decrypted. To be decrypted it must use it's clientssl profile. This happens after the ssl negotiation occurs.

 

 

It's discussed in this thread:

 

 

http://devcentral.f5.com/Default.aspx?tabid=28&view=topic&forumid=5&postid=3071

 

Click here

 

 

rapmaster_c alludes to a way to get around this by using two virtuals (one http the other https) but this may or may not work in your situation.

 

 

Currently the SSL::profile command is only available in the CLIENT_ACCEPTED and SERVER_CONNECTED events where you don't have access to the layer 7 content.

 

 

-Joe