For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

donmon_10187's avatar
donmon_10187
Icon for Nimbostratus rankNimbostratus
Oct 14, 2013
Solved

Using iRules to conserve public IP addresses

Hello all, I've been tasked with coming up with a solution using one public IP address and laod balancing it to multiple pools using iRules and host-headers. Currently, we're doing a one to one NAT...
application delivery
data groups
devops
host-headers
iRules
  • Lee_Payne_53457's avatar
    Lee_Payne_53457
    Oct 14, 2013

    I was assuming that they wanted it to be seamless rather than present a cert error but you are correct, if you didn't mind the cert error appearing any cert applied to a client SSL profile would work for this.

     

nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Oct 14, 2013

Would it be impossible? You'd need a client SSL profile so the f5 can decrypt the traffic so the irule can inspect the http traffic. Then if there is a cert mismatch wouldn't you just get the certificate warning in the browser and need to click on Continue? Not pretty of course so yes, you'd want a wildcard cert of some description.