For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

robert_carney's avatar
robert_carney
Icon for Nimbostratus rankNimbostratus
Oct 05, 2016

Server side SSL rpofile based on URI

We are doing pool level redirects in Irules to diffrent pool as part of site migrations , All incoming connections are coming in port 80. and 90% of the site goes to the default port 80 pool so we can not add the server side ssl profile to the VIP is there a way to only have the server ssl profile on some URIs Thank you

 

iRules
LTM
security

1 Reply

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Oct 05, 2016

    Use below irule if you have different pool for different uri.

       when HTTP_REQUEST { switch -glob [HTTP::uri] 
    { "/CBO" { pool ECC-PROD-APP_7302-CBO SSL::enable serverside } 
    "/BOB" { pool ECC-PROD-APP_7303-BOB SSL::enable serverside } 
    "/BMI" { pool ECC-PROD-APP_7304-BMI SSL::enable serverside } 
    "/BSI" { pool ECC-PROD-APP_7313-BSI SSL::enable serverside } 
    "/AHLI" { pool ECC-PROD-APP_7314-AHLI SSL::enable serverside } 
    "/HILAL" { pool ECC-PROD-APP_7315-HILAL SSL::enable serverside } 
        } 
    }