Forum Discussion
Shazee
Aug 17, 2021Altocumulus
Use different Client SSL profile for https traffic with same domain and different URI.
I have configured a virtual server to accept HTTPS from the public network. Perform a TLS MA on HTTPS traffic, then does a host header rewrite and assigns it to a pool. Example: https://myorg.com/v...
Daniel_Wolf
Aug 17, 2021MVP
Hi ,
try this iRule, I think it should work.
when SERVER_CONNECTED {
if { [HTTP::uri] starts_with "/abc" } {
SSL::profile serverssl_profile1
} elseif { [HTTP::uri] starts_with "/xyz" } {
SSL::profile serverssl_profile2
} elseif { [HTTP::uri] starts_with "/lalala" } {
SSL::profile serverssl_profile3
} else {
# default
# SSL::disable
}
}
KR
Daniel
- Daniel_WolfAug 17, 2021MVP
Sorry, please ignore my above response. I misunderstood your requirement, I understood it like mTLS on the serverside.
I think your requirement cannot be satisfied. First TLS handshake happens, then HTTP URI is inspected. I would not know how to turn this process around.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects