Forum Discussion
flomkrl_29950
Nimbostratus
Apr 07, 2008SSL VS keep TCP open if pool down
Hello,
At this time, when a pool behind a vs ssl is down, the vs ssl is down. But it is still possible to negociate ssl.
Is it possible to reject ssl negociation (by closing the po...
hoolio
Cirrostratus
Apr 07, 2008Sure. Here is a more generic version of the Codeshare example:
http://devcentral.f5.com/wiki/default.aspx/iRules/HowToAvoidSSLHandshakeWhenNoPoolMemberAvailable.html
This event is triggered when a TCP connection is established with the client
when CLIENT_ACCEPTED {
Check if the default pool of the VIP has no active members
if {[active_members [LB::server pool]] < 1}{
Disable the client SSL profile and send a TCP reset to the client
SSL::disable
reject
}
}
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects