Server SSL Profile - how to use selectively

Hi Muhammad,

Can you please share the details of your iRule and VIP

There are 2 ways you can try accomplish this

Method 1 - Using iRule

You need to add a default ssl server profile or the required Server side SSL profile to your VIP. Then updatemy your irule to initially disable the server side ssl for all sites and then renable it on the website where you needed it on.

1. when CLIENT_ACCEPTED {
2. SSL::disable serverside
3. }
4.  
5. when HTTP_REQUEST {
6. switch [string tolower [HTTP::host]] {
7. site1.website.com { pool site1.website.com_pool }
8. site2.website.com { pool site2.website.com_pool }
9. SSLsite3.website.com {
10. SSL::enable serverside
11. pool SSLsite3.website.com_pool
12. }
13. site4.website.com { pool site4.website.com_pool }
14. default { reject }
15. }
16. }

Method 2 - You can do easier since version 11.5 (feature is available in 11.4 but not working...) with Local traffic policies.

Rule 1:

• Condition :
  • HTTP-host host site1.website.com
• action :
  • forward pool site1.website.com_pool
  • serverssl disable

Rule 2:

• Condition :
  • HTTP-host host site2.website.com
• action :
  • forward pool site2.website.com_pool
  • serverssl disable

Rule 3 (SSL Site):

• Condition :
  • HTTP-host host site3.website.com
• action :
  • forward pool site3.website.com_pool