Forum Discussion
AjayPra_161698
Nimbostratus
Feb 03, 2015SSL offloading for https traffic
Scenario:
Nodes:Node1,Node2,Node3
Pool:Node1,Node2
Virtual Server:ABC
VIP 1.1.1.1
Port any
SSL offloading is configured on LTM with clientssl profile attached to the ...
shaggy
Nimbostratus
Feb 03, 2015do you mean combine? should be as simple as:
when CLIENT_ACCEPTED {
if { [TCP::local_port clientside] != 443} {
SSL::disable clientside
SSL::disable serverside
}
}
when HTTP_REQUEST {
set uagent [string tolower [HTTP::header User-Agent]]
if { $uagent contains "msie6" or $uagent contains "msie7" or $uagent contains "msie8" or $uagent contains "mozilla/4.0"}{
pool pool1
} else {
pool pool2
}
}
AjayPra_161698
Nimbostratus
Feb 03, 2015thanks shaggy .
so with this irule.
For http traffic on VS VIP:Any
http traffic will not be affected due to ssl profile .. and pool will be selected based on useragent value.
For https traffic .
Client Side SSL traffic offloading will be done and pool will be selected based on the http header useragent value ?
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects