TLS Server Name Indication

Problem this snippet solves: Extensions to TLS encryption protocols after TLS v1.0 have added support for passing the desired servername as part of the initial encryption negotiation. This functiona...
Published Mar 18, 2015
Version 1.0
application delivery
devops
iRules
security
Daniel_Alves_19's avatar
Daniel_Alves_19
Icon for Nimbostratus rankNimbostratus
Jun 01, 2017

Hi anyone,

 

I have a question and in case to switch the traffic not just using SNI information, but the uri too, How can I change the code to this work ?. The flow of traffic it´ll be.

 

The connection gets to VIP, on this VIP there´s 5 certificates, so the SNI it´ll be checked out to decrypt the data, on the same VIP there´s an Irule to redirect traffic using uri to different pools, after this the traffic must to be encrypt again because the server has the certificates too.

 

Client ---- VIP:443 (5 certificates) SNI ->>> Irule redirect uri to pools ->>> | Certificates encrypt server side.

 

Anyone can help me ?