For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shay_Ben-David1's avatar
Shay_Ben-David1
Icon for Nimbostratus rankNimbostratus
Dec 22, 2008

use different pool to SSL

Hi,

 

we have a situation that usually the ASM/BIGIP terminates the SSL on the LTM and uses a pool of servers with clear HTTP, in some situation we need to use differnet pool that also use SSL, SSL terminates on the BIGIP and again use different pool with SSL, i wrote an irule:

 

 

when HTTP_REQUEST {

 

if { [string tolower [HTTP::uri]] contains "ssl" } {

 

pool ssl

 

} else {

 

pool clear

 

}

 

}

 

 

this irule will not work because of an missing "ssl server profile" (i can use the default , i am looking for a way to add this to the irule.

 

Thanks

 

application delivery
dev
devops
iRules

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Dec 22, 2008
    Hi Shay,

     

     

    Which ASM version are you running? If it's pre-9.4.2, the operation could be complicated by the _ASM_clientside iRule. For 9.4.2+ you could use 'SSL::disable serverside' (Click here). You could add the server SSL profile to the VIP and then selectively disable it based which pool you'll send the request to.

     

     

    Aaron