For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

lmalafati_54233's avatar
lmalafati_54233
Icon for Nimbostratus rankNimbostratus
Dec 01, 2010

SSL Offload and redirect pools

Hi All,     I have the follow scenario and I would like know If there are one way to try to solve this using iRules.       The condition is...one VS that responds on https using ssl off...
application delivery
dev
devops
iRules
Daniel_Alves_19's avatar
Daniel_Alves_19
Icon for Nimbostratus rankNimbostratus
Jun 29, 2017

Hi guys,

 

I have the same issue, my VS on 443 port and pools with 80 port. Can I use the same irule ?

 

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 30, 2017

I have the same issue, my VS on 443 port and pools with 80 port. Can I use the same irule ?

 

Daniel,

 

You don't even need an iRule in this case. This is just a simple VIP listening on port 443, with a client SSL profile and a pool that points to servers on port 80. The client SSL profile decrypts the SSL on the client side, and the lack of a server SSL profile allows that traffic to flow unencrypted to the servers.