SNI Routing with DNS Lookup
Published Jan 31, 2022
Version 1.0Was this article helpful?
Hi Peter,
your [catch "...do something..." addr] command allows double-substitution. Special crafted SNI records will be able to hijack or crash your LTM. You may test my observation by manually overwriting the value of ${s_sni} to "www.\[{log}ups!?!\].de". It should add a harmless log line to your log...
Cheers, Kai