For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joel_Moses's avatar
Joel_Moses
Icon for Nimbostratus rankNimbostratus
Mar 28, 2011

TLS Server Name Indication iRule

http://devcentral.f5.com/wiki/default.aspx/iRules/TLS_ServerNameIndication.html     I posted the iRule above for discussion purposes. It decodes the TLS SNI extension field in an SSL/TLS negot...
application delivery
dev
devops
iRules
Joel_Moses's avatar
Joel_Moses
Icon for Nimbostratus rankNimbostratus
Mar 31, 2011
That's great! Let me know if you guys need a sounding board for this.

 

 

It occurred to me in the Advanced Design forum where I saw someone asking about a layer 2 forwarding virtual server and SSL offload -- a CLIENT_HANDSHAKE_INIT event would be an interesting place to switch clientSSL profiles _and_ pool assignments on the fly based on either SNI _or_ the destination IP address; letting you switch the SSL cert _and pool_ presented based on either item. That could be useful when inserting ASM in the route path in front of an _existing_ secure web server network.