Forum Discussion
François_Bégin_
Nimbostratus
NimbostratusStumped on iRule for SSL traffic
Hi,
I seem to be stumped here. I have an iRule that does re-direction based on HTTP:HOST.
when HTTP_REQUEST {
if { [HTTP::host] starts_with "billing.domain.com"} {
pool billing.domain.com_pool
} elseif { [HTTP::host] starts_with "hr.domain.com"} {
pool hr.domain.com_pool
}
This works fine for http traffic. I added another virtual server for https traffic and it does not appear to work. The SSL certs are on the servers in the two pools (not on the F5). I just want to use the F5 to load-balance the traffic.
Is this not working because the traffic from the client to the F5 is encrypted and the F5 cannot read [HTTP:host]? Is the only solution to terminate the SSL connection on the F5?
- The Host header is part of the payload and unless the BIG-IP is terminating the SSL connection, there is no way for it to read the payload for the header. So, yes, if you want to make decisions based on the payload content, the only option is to terminate the SSL connection on the BIG-IP.
-Joe
