TLS Server Name Indication iRule

Thanks!

 

 

I just posted a revision once I realized that there's a really easy way to do pool selection with a second data group list. One datagroup sets the clientSSL profile per hostname, and the other sets the pool per hostname. If it's not in either datagroup, it'll fall through to the default pool or clientSSL profile.

 

 

So -- now this will allow you to host multiple sites from multiple pools using multiple certificates, all through a single VIP.

 

 

...if browser support for SNI is there, of course. :>

 

 

Joel