Forum Discussion

Murugs_322349's avatar
Murugs_322349
Icon for Nimbostratus rankNimbostratus
Oct 10, 2017

SNI Based on IRule

I have a requirement to set SNI based on the incoming context for every subsequent requests by same client to the same back-end server.   I have put the following in SERVERSSL_CLIENTHELLO_SEND ...
application delivery
LTM
RossVermette's avatar
RossVermette
Icon for Nimbostratus rankNimbostratus
Oct 10, 2017

How about something a little different, where you set the "tls_SNI_extension" based on what the client sends? Something like this:

when CLIENTSSL_HANDSHAKE {
    if { [SSL::extensions exists -type 0] } then {
        set tls_sni_extension [SSL::extensions -type 0]
    } else {
        set tls_sni_extension ""
    }
}
when SERVERSSL_CLIENTHELLO_SEND {
    if { $tls_sni_extension ne "" } then {
        SSL::extensions insert $tls_sni_extension
    }
}