Forum Discussion
Anesh
Cirrostratus
May 10, 2017SSL Forward proxy Bypass iRule not working
The below irule does not Bypass SSL forward proxy function for url's defined in the Bypass datagroup, it continues to re-sign with the certificate provdied by F5...
when CLIENTSSL_CLIENTHELLO {
...
Anesh
Cirrostratus
May 12, 2017Below iRule works
when CLIENT_ACCEPTED {
if { $static::DEBUG } { log local0. "in event" }
log local0. "[IP::client_addr]:[TCP::client_port]: New TCP connection to destination [IP::local_addr]:[TCP::local_port]"
HTTP::disable
SSL::disable clientside
SSL::disable serverside
TCP::collect
set destip1 [IP::local_addr]
log local0. "$destip1"
if { (![class match $destip1 equals BypassDestIP])}
{
virtual EgressANYVIP
}
else
{
translate address enable
translate port disable
pool BluecoatProxyPool
}
}
when CLIENT_DATA {
if { $static::DEBUG } { log local0. "in event" }
set destip [IP::local_addr]
log local0. "$destip"
binary scan [TCP::payload] c type
if { $type == 22 and (![class match $destip equals BypassDestIP])}
{
SSL::enable clientside
SSL::enable serverside
HTTP::enable
}
TCP::release
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
