Forum Discussion

trx's avatar
trx
Nov 02, 2011

use ssl profile in an IRule

Hello Community, If you have a SSL VS that points to an pool that contains http 80 and https 443, is there a way to direct traffic to the 443 member and use an ssl profile? I do NOT want to set the...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Nov 02, 2011
is this applicable? 

[root@iris:Active] config  b virtual bar list
virtual bar {
   snat automap
   destination 172.28.17.33:http
   ip protocol tcp
   rules myrule
   profiles {
      http {}
      serverssl {
         serverside
      }
      tcp {}
   }
}
[root@iris:Active] config  b rule myrule list
rule myrule {
   when HTTP_REQUEST {
        SSL::disable serverside
        if {[string tolower [HTTP::uri]] starts_with "/secure"} {
                SSL::enable serverside
                pool foo member 10.10.70.120 443
        } else {
                pool foo member 10.10.70.110 80
        }
}
}
[root@iris:Active] config  b pool foo list
pool foo {
   members {
      10.10.70.110:http {}
      10.10.70.120:https {}
   }
}

[root@iris:Active] config  curl -I http://172.28.17.33/
HTTP/1.1 200 OK
Date: Wed, 02 Nov 2011 07:59:24 GMT
Server: Apache/2.0.59 (rPath)
Last-Modified: Sat, 11 Jun 2011 00:31:47 GMT
ETag: "667a-67-cfb682c0"
Accept-Ranges: bytes
Content-Length: 103
Vary: Accept-Encoding
Set-Cookie: testcookie=helloworld
Content-Type: text/html; charset=UTF-8

[root@iris:Active] config  curl -I http://172.28.17.33/secure
HTTP/1.1 404 Not Found
Date: Wed, 02 Nov 2011 07:59:29 GMT
Server: Apache/2.0.59 (rPath)
Content-Type: text/html; charset=iso-8859-1