Forum Discussion
Use iRule to control choosing which SSL certificate to use based on SNI
VS address: 10.1.20.43
VS port: 443
There are two SSL Profiles on F5: web1-ssl and web2-ssl.
I want to use an iRule to control the selection of which SSL certificate to use based on SNI:
For example, when a user visits web1.com, the VS uses the SSL Profile web1-ssl;
When a user accesses web2.com, this VS uses the SSL Profile web2-ssl.
Please tell me, how should I write this iRule?
grateful!
shixin You do not need an iRule for this because the F5 does this provided you enable SNI on the VS and configure the SSL profile fields appropriately. This document might assist you in this process.
shixin You do not need an iRule for this because the F5 does this provided you enable SNI on the VS and configure the SSL profile fields appropriately. This document might assist you in this process.
- shixinNimbostratus
At first I wanted to use iRule to identify SNI, but I couldn't do it after trying many times; but based on this article you provided, I achieved the effect I wanted, thank you!
shixin You could probably do this via iRule but it would be much more complicated then just configuring it the way the document outlines.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com