Forum Discussion
johnko05_45751
Nimbostratus
NimbostratusSSL iRule on a non-SSL VIP??
This iRule inserts specific headers depending on whether the connection is HTTPS-AUTH (requiring a client certificate), HTTPS, or HTTP. I am able to apply this iRule to the HTTPS and HTTPS-AUTH VIPs ...
You can "hide" the SSL commands from the interpreter by stuffing them into variables, then eval'ing the vars, something like this:
when HTTP_REQUEST {
...
if {[PROFILE::exists clientssl] == 1} {
set cname "SSL::cipher name"
set cbits "SSL::cipher bits"
set cver "SSL::cipher version"
HTTP::header replace SSLCipher [eval $cname]:[eval $cbits]-[eval $cver]
...
HTH
/deb
