Forum Discussion

Frank_30530's avatar
Frank_30530
Icon for Altocumulus rankAltocumulus
Feb 07, 2018

Select ServerSSL Profile using VS Policy in TMOS 13.1: ERROR: an action precedes its conditions.

This concerns LTM on TMOS 13.1.0.2: We are configuring a virtual server with TLS SNI support (for example: site1.example.com and site2.example.com are using the same virtual server). We need to ...
application delivery
BIG-IP
LTM
wuench's avatar
wuench
Icon for Nimbostratus rankNimbostratus
Jan 08, 2020

This appears to still be the case in 14.1.2. The only condition I can get to work with Select SSL Profile is TCP. It appears the only way to select an SSL Profile is via iRules. Other than that the default SSL Server Profile will always be selected as far as I can tell. I am not really sure why a VIP even allows multiple SSL Server Profiles to be configured.

 

As for why you would want to do this. We want to route multiple requests to servers using SNI but also resend that Server Name to the server. Currently without resorting to iRules or multiple VIPs no name is sent, or the name configured in the Default SSL Server Profile is sent depending on the Server SSL Profile configuration.