For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chip_Hudgins_64's avatar
Chip_Hudgins_64
Icon for Nimbostratus rankNimbostratus
Jun 17, 2005

SSL client profile based on hostname

Is there anyway to select or change the SSL client profile based on hostname?     If is easy to find the hostname in an HTTP_REQUEST but then how could you set the SSL client profile? I am...
application delivery
dev
devops
iRules
Nic_67118's avatar
Nic_67118
Icon for Nimbostratus rankNimbostratus
Sep 27, 2011
Hello,

 

 

Does any one know of a way within the iRule to kick out non supported browsers/OSs? I know they get up to the point in the iRule that accept connections from TLS 1.0 - 1.2, So I am guessing there is something in the payload or the length of the payload is different, that the iRule does not like.

 

 

I would basically just like to have SNI work for those browsers that do support it, and have the other go to the default SSL profile attached to the VS.

 

 

Opinions?