For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
May 24, 2007

SSL profile options

Can you set the nonssl option for a client SSL profile in a rule? I'd like to be able to give a few customers a rule to use on port 0 VIPs and not have to force them to enable this option on each cli...
application delivery
dev
devops
iRules
F5Rookie_28647's avatar
F5Rookie_28647
Icon for Nimbostratus rankNimbostratus
Nov 29, 2007
Aaron, since you seem to be will versed in the SSL configuration maybe you can help me in my situation.

I have a wildcard certificate installed so that:

* https://login.mycompany.com

* https://secure.mycompany.com

All resolve to the same IP address/port. However I need come up with an iRule so that I can assign each SSL subdomain to their own pool. Something like this:


when HTTP_REQUEST { 
   if { [string tolower [HTTP::host]] equals "login.mycompany.com"}
   {                                              
     pool LOGIN
   }
   elseif { [string tolower [HTTP::host]] equals "secure.mycompany.com"}
   {
     pool SECURE
   }
   else
   {
   pool WebServer
   }
}

The above rule works fine for my non-SSL traffic but HTTP_REQUEST is blank for SSL requests so I don't know what to do. I was hoping to find a HTTPS_REQUEST but apparently that does not exist. Any help would be GREATLY appreciated!!!