Forum Discussion
Bob_Rion_9275
Nimbostratus
Apr 08, 2005v9 "clientssl cipher insert enable" ? equivelent
We are trying to find a v9 featrure that is equivelent to the 4.x "clientssl cipher insert enable". Have looked at manual, askf5 etc and could not find a similar optoin in v9.
The goal is to simply put the SSL cipher information Cipher and Strength to use in an iRule to handle >=128 bit browsers with one pool and redirect if not >=128 SSL.
We accomplished this with 4.x with "clientssl cipher insert enable" in the SSL proxy and then the following type of iRule.
rule stuff_sp_rule {
if (exists http_header("StuffSSL") and exists http_header("SSLClientCipher") and http_header("StuffSSL") == "BigIP2004") {
if (http_header("SSLClientCipher") contains "version=TLSv1/SSLv3" and http_header("SSLClientCipher") contains one of sslbits) {
if (http_uri == "/stuff") {
redirect to "https://xxx.yyy.zzz/stuff/"
}
else if (http_uri starts_with "/stuff/") {
use pool stuff_sp
}
else {
discard
}
}
else {
redirect to "https://xxx.yyy.zzz/ssl_upgrade.html"
}
}
else {
discard
}
}
- Deb_Allen_18Historic F5 Account
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects