Use iRule to control choosing which SSL certificate to use based on SNI

Question

VS address: 10.1.20.43VS port: 443There are two SSL Profiles on F5: web1-ssl and web2-ssl.I want to use an iRule to control the selection of which SSL certificate to use based on SNI:For example, when a user visits web1.com, the VS uses the SSL Profile web1-ssl;When a user accesses web2.com, this VS uses the SSL Profile web2-ssl.Please tell me, how should I write this iRule?grateful!

paulius · Accepted Answer

shixin You do not need an iRule for this because the F5 does this provided you enable SNI on the VS and configure the SSL profile fields appropriately. This document might assist you in this process.
https://community.f5.com/t5/technical-articles/ssl-profiles-part-7-server-name-indication/ta-p/279829

shixin · Answer

At first I wanted to use iRule to identify SNI, but I couldn't do it after trying many times; but based on this article you provided, I achieved the effect I wanted, thank you!

paulius · Answer

shixin You could probably do this via iRule but it would be much more complicated then just configuring it the way the document outlines.

Forum Discussion

Use iRule to control choosing which SSL certificate to use based on SNI

3 Replies

Recent Discussions

Disk space full - what files, folders are safe to delete?

ASM instance creation

BIG-IP DNS: Check Status Of Multiple Monitors Against Pool Member

Open Redirection Mitigation

F5Access | MacOS Sonoma

Related Content

Choosing an Instance for F5 BIG-IP in AWS

JWT authorization with NGINX Ingress Controller

Distributed caching of authentication requests with NGINX Ingress Controller

Automating ACMEv2 Certificate Management on BIG-IP

Re: Management Certificate