For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

PG0581's avatar
PG0581
Icon for Cirrus rankCirrus
Apr 21, 2018

Send DNS request to specific pool member

I created an iRule to attempt to send a couple of FDQNs to specific pool members and in testing with an openssl connect command it's failing. So I just wanted to confirm that there isn't and issue wi...
application delivery
iRules
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Apr 22, 2018

That won't work, because without SSL offload on the virtual to decrypt the request and an HTTP profile, you will not trigger the HTTP_REQUEST event.

 

Take a look at

 

iRule Choose pool base on SNI and disable ssl base on SNI

 

This irule snoops the (unencrypted) SNI request header from the SSL ClientHello packet, and then chooses the pool member based on that.

 

It will work with SSL passthrough