Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Serverside SNI injection iRule

Problem this snippet solves: Hi Folks, the iRule below can be used to inject a TLS SNI extension to the server side based on e.g. HOST-Header values. The iRule is usefull if your pool servers depe...
Updated Jun 05, 2023
Version 2.0
devops
security
server name indication injection
sni
sni injection
Kai_Wilke's avatar
Icon for MVP rankMVP
My name is Kai Wilke and I'm working as a Principal Consultant for IT-Security at itacs GmbH - a German consulting company specialized in Microsoft Security cloud solutions, F5 customizations as well as for classic IT-Consulting. You can find additional information about me and my work here: https://community.f5.com/kb/technicalarticles/qa-with-itacs-gmbhs-kai-wilke---devcentrals-featured-member-for-february/282700
View Profile
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Apr 06, 2017

Hi Stanislas,

 

I've slightly optimized the iRule. Make sure to update your toolbox... ;-)

 

Cheers, Kai