For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
May 24, 2007

SSL profile options

Can you set the nonssl option for a client SSL profile in a rule? I'd like to be able to give a few customers a rule to use on port 0 VIPs and not have to force them to enable this option on each cli...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 20, 2007
Hi Tom,

You can configure a server SSL profile on the VIP and then use SSL::disable in an iRule to selectively disable the server side encryption. Here's an example:


when HTTP_REQUEST {
    Check if request matches the criteria to disable server-side SSL
   if { [HTTP::uri] starts_with "/clear"}{
       disable SSL on the serverside context
      SSL::disable serverside
       select the http pool
      pool http_pool
   } else {
       default is to use server-side SSL and the https pool
      pool https_pool
   }
}

Aaron