Forum Discussion

Brian_Dantzig's avatar
Brian_Dantzig
Icon for Nimbostratus rankNimbostratus
Jul 03, 2012

selective drop of SSL

I have a virtual server that has client and server ssl profiles so that incoming HTTPS is terminated then after processing is re-encrypted to the pool. There is an iRule that inspects the HTTP reques...
application delivery
dev
devops
iRules
Eric_St__John's avatar
Eric_St__John
Icon for Employee rankEmployee
Jul 03, 2012
Depending on how many paths you would like to exclude from encryption, you could use a couple of different methods. The simplest method for a single path: 

when CLIENT_ACCEPTED {
  SSL::disable serverside
}

when HTTP_REQUEST { 
  if {!([string tolower [HTTP::path]] starts_with "/standardhttppath") } {
    SSL::enable serverside
    }
}
 Or, if you have many paths that you would like to list in a data group (called 'standard_http_dg' in this example) 
 when CLIENT_ACCEPTED {
  SSL::disable serverside
}

when HTTP_REQUEST {
  if { ![class match [string tolower [HTTP::path]] starts_with standard_http_dg] } {
    SSL::enable serverside
    }
}

Regards,

Eric