For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

xMadi's avatar
xMadi
Icon for Nimbostratus rankNimbostratus
Feb 09, 2018

SSL interception on F5

Hello,   I am planning to intercept SSL on F5 to certain web servers to apply some iRules based on HTTP Headers. Currently I have Virtual server for HTTPS for those web servers. If I understand t...
application delivery
LTM
MvdG's avatar
MvdG
Icon for Cirrus rankCirrus
Feb 09, 2018

xMadi,

 

You are correct. You need to upload a valid certificate and use it in the client-ssl profile. If you do not care about the internal certificate, you can use the serverssl-insecure-compatible profile.

 

Instead of an iRule, maybe you can you a policy for the HTTP header based operations.

 

Regards, Martijn.

 

MvdG's avatar
MvdG
Icon for Cirrus rankCirrus
Feb 09, 2018

Marek,

 

You should take a look at a LTM policy (Local Traffic -> Policies).

 

You can create rule within a LTM policy that forwards traffic to a pool based on HTTP header. Off course you can do the same with an iRule, but if you can do it in the GUI, you should do it there.

 

Good luck.

 

Martijn.