Forum Discussion
donmon_10187
Nimbostratus
NimbostratusUsing iRules to conserve public IP addresses
Hello all,
I've been tasked with coming up with a solution using one public IP address and laod balancing it to multiple pools using iRules and host-headers. Currently, we're doing a one to one NAT...
I was assuming that they wanted it to be seamless rather than present a cert error but you are correct, if you didn't mind the cert error appearing any cert applied to a client SSL profile would work for this.
nathe
Cirrocumulus
CirrocumulusWould it be impossible? You'd need a client SSL profile so the f5 can decrypt the traffic so the irule can inspect the http traffic. Then if there is a cert mismatch wouldn't you just get the certificate warning in the browser and need to click on Continue? Not pretty of course so yes, you'd want a wildcard cert of some description.