For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Allan_ivari_304's avatar
Allan_ivari_304
Icon for Nimbostratus rankNimbostratus
Nov 02, 2018

use irule to force SSL profile based on URL

i am new to F5, and this question maybe very basic. thanks in advance for whoever is helping. 🙂 my situation is: we have 2 web server using same VIP base on different URL, i am pointing them diffe...
devops
iRules
LTM
security
Alvaro_Arcila's avatar
Alvaro_Arcila
Icon for Nimbostratus rankNimbostratus
Feb 23, 2020

Hi Kevin,

 

Would you please provide a link for doing this:

 

"If you actually need different types of client SSL profiles (like with different ciphers, or client authentication), the you'd have to parse the binary SNI value from the TCP payload. There's plenty of examples of that here, so not terribly difficult."

 

I'm new to F5 and I need this:

 

https://domain.com/Customer1/ ---> !AES:!DES...

 

https://domain.com/Customer2/ ----> !TLS1:!TLS1_1:!RSA:!AES:DES

 

Regads,