For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

steve_011's avatar
steve_011
Icon for Nimbostratus rankNimbostratus
Dec 06, 2016

Terminate SSL and open TCP socket connection inside

I need to answer a socket tunnel request in the form of ssl://servername, terminate the SSL at the F5 and open a connection to the inside server on an arbitrary port over an unencrypted connection. T...
application delivery
devops
iRules
steve_011's avatar
steve_011
Icon for Nimbostratus rankNimbostratus
Dec 09, 2016

Here is the answer.

 

Since all traffic on the outside is SSL, collect the first decrypted SSL packet after the handshake, read it to see if it has "HTTP" in it. If it does, go on to normal HTTP processing. If it doesn't, disable the http profile and allow it to connect through to the desired pool and port.