Forum Discussion

Scott123456789's avatar
Scott123456789
Icon for Cirrus rankCirrus
Apr 30, 2019

SNI Implementation

My F5 is running version 13.1.1.4.0.0.4. My organization has an existing web application that uses SNI. One URL does authentication based on certificates, the other URL does authentication based on A...
application delivery
LTM
security
sni
Nergalex's avatar
Nergalex
Icon for Employee rankEmployee
Feb 07, 2020

You can insert a SNI in SSL Server Side session based on the same SNI value in Client Side.

For example, if you use the mentioned Serverside SNI injection iRule, replace sni_value setting logic

when CLIENTSSL_CLIENTHELLO priority 320 {
    if {[SSL::extensions exists -type 0]} {
        binary scan [SSL::extensions -type 0] @9A* sni_value
    } else {
        set sni_value {}
    }
    log local0. "SNI: $sni_value"
}