Using the oneconnect profile in an irule

Hello,

 

We have a virtual server that is load balancing connections outbound from our environment that does not use a pool, but rather selects a node based on RESOLV::lookup. It also uses server side SSL. Our problem is that the client application is making the call to the F5 VIP is using HTTP 1.0 and it is causing performance issues because the connections are closed for each request. Due to budget reasons they cannot make any changes to their application.

 

I have been looking into using the oneconnect profile to increase performance. However, when the oneconnect profile is applied along with an http profile using oneconnect transformations enabled, we are getting a TCP RST back from the F5 to the client. Is there a restriction with the oneconnect profile that requires a pool to be configured? Can it be used in an irule using node selection? Does it need to be called in the irule using "ONECONNECT::reuse enable"? What else could be missing? Thanks in advance.

 

VIP: virtual Name { destination x.x.x.x:x ip protocol 6 rules Name profiles { client { clientside } server { serverside } http {} tcp {} } }

 

irule Name:

 

when HTTP_REQUEST { set services [RESOLV::lookup @x.x.x.x "www.foo.com"] HTTP::header replace Host "www.foo.com" snat automap node [lindex $services 0] 443 }