Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

ckteur's avatar
ckteur
Icon for Cirrus rankCirrus
2 years ago
Solved

Solution to rewrite URL by URI, forwarding on pools and send server name SNI to backend

Hello everybody,

I have only one VS that used by some URLs and I need to: 

 

  • Rewrite urls by uri


https://urlorigin/asse/1/     -->   https://urldest-asse1.hppaas.com/

https://urlorigin/asse/2/     -->  https://urldest-asse2.hppaas.com/

https://urlorigin/tfon/1/     -->    https://urldest-tfon1.hppaas.com/

 

  • Forward to a pool by url (original or rewritted url ?)

If "urlorigin/asse/1/"  -->  forward to "Pool_asse1"

If "urlorigin/asse/2/"  -->  forward to "Pool_asse2"

If "urlorigin/tfon/1/"  -->  forward to "Pool_tfon1"

 

  • Send the "server name" SNI parameter to good pool_member 

I have created SSL server profile per url/pool and I specified the "server name" parameter: (it's the same certificate and profile client for all):

Profile_SSL_Server_Asse1 (server name = urldest-asse1.hppaas.com)

Profile_SSL_Server_Asse2 (server name = urldest-asse2.hppaas.com)

Profile_SSL_Server_Tfon1 (server name = urldest-tfon1.hppaas.com)

 

If "urlorigin/asse/1/" (or "urldest-asse1.hppaas.com/",  I dont know)  --> Profile_SSL_Server_Asse1

 

 

I tried to write an Irule but is KO ... (same issue with an rewrite_profile / policy to forward on pool / irule for SNI)

It's running with just one Url and with rewrite_profile, static pool on VS and SSL_Server_Profile with the "serve_name" parameter.

 

Can you help me please ?
Thanks !

3 Replies

No RepliesBe the first to reply