Forum Discussion
AjayPra_161698
Nimbostratus
Feb 03, 2015SSL offloading for https traffic
Scenario:
Nodes:Node1,Node2,Node3
Pool:Node1,Node2
Virtual Server:ABC
VIP 1.1.1.1
Port any
SSL offloading is configured on LTM with clientssl profile attached to the ...
shaggy_121467
Cumulonimbus
Feb 03, 2015do you mean combine? should be as simple as:
when CLIENT_ACCEPTED {
if { [TCP::local_port clientside] != 443} {
SSL::disable clientside
SSL::disable serverside
}
}
when HTTP_REQUEST {
set uagent [string tolower [HTTP::header User-Agent]]
if { $uagent contains "msie6" or $uagent contains "msie7" or $uagent contains "msie8" or $uagent contains "mozilla/4.0"}{
pool pool1
} else {
pool pool2
}
}
AjayPra_161698
Nimbostratus
Feb 03, 2015thanks shaggy .
so with this irule.
For http traffic on VS VIP:Any
http traffic will not be affected due to ssl profile .. and pool will be selected based on useragent value.
For https traffic .
Client Side SSL traffic offloading will be done and pool will be selected based on the http header useragent value ?
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects