Forum Discussion
Harold_Deadman_
Nimbostratus
Sep 28, 2011what is appropriate way to use SSL::disable serverside/ SSL::enable serverside
We have a requirement to encrypt server-side traffic between the F5 and our SSO web application (CAS) because passwords are transmitted. Our F5 VIP has several different applications behind it on seve...
Michael_Yates
Nimbostratus
Sep 28, 2011Hi Harold,
I had a similar situation where we wanted traffic to be Secure depending on the area that the client was going to. Our configuration sounds pretty close to what yours is (URI's destinations are hosted on different servers and have different Pools, so we used the Pool as the trigger).
See if this methodology works for you.
when CLIENT_ACCEPTED {
SSL::disable serverside
}
when HTTP_REQUEST {
}
when SERVER_CONNECTED {
if { ([string tolower [LB::server pool]] eq Target.Pool.Name.For.SSL.Enable) } {
SSL::enable serverside
}
else {
SSL::disable serverside
}
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects