For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kyle_S's avatar
Kyle_S
Icon for Nimbostratus rankNimbostratus
Jul 13, 2017

Where can you assign SSL::profiles within an iRule?

We are now migrating app3 and app4 to be hosted by a cloud provider across a dedicated circuit which requires the Server Name Indicator to be set. I am able to set the server name in the serverssl Pr...
application delivery
cloud
iRules
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Jul 13, 2017

Hello

 

try this code ,

 

when CLIENT_ACCEPTED { 

    SSL::disable serverside

}

when ACCESS_ACL_ALLOWED {    
set poolnumber "0"

  switch -glob [string tolower [HTTP::uri]] { 
        "/app1a/*" -  
        "/app1b/*" {  
            pool Pool_app1
            set poolnumber "1"  
            }  
        "/app2a/*" -  
        "/app2b/*" {  
            pool Pool_app2 
            set poolnumber "2"
            }  
        "/app3a/*" -  
        "/app3b/*" {  
            pool Pool_app3 
            set poolnumber "3"
            }  
        "/app4a/*" -  
        "/app4b/*" {  
            pool Pool_app4 
            set poolnumber "4"
            }  
        default {  
            pool Pool_default  
            }  
    }  
}

when SERVER_CONNECTED {

if { $poolnumber == "1" } { 
        SSL::profile serverssl_profile1 
        SSL::enable
  } elseif { $poolnumber == "2" } {
        SSL::profile serverssl_profile2
        SSL::enable
  } elseif { $poolnumber == "3" } {
        SSL::profile serverssl_profile3
        SSL::enable
  } elseif { $poolnumber == "4" } {
        SSL::profile serverssl_profile4
        SSL::enable
  } else {
        SSL::profile serverssl_profile_default
        SSL::enable
  } 
}