TLS Server Name Indication

Problem this snippet solves: Extensions to TLS encryption protocols after TLS v1.0 have added support for passing the desired servername as part of the initial encryption negotiation. This function...
Updated Aug 28, 2025
Version 2.0
application delivery
devops
iRules
security
Chad_Jenison's avatar
Chad_Jenison
Icon for Nimbostratus rankNimbostratus
Dec 10, 2017

Is there any reason to think that the code for examining TLS ClientHello would break with TLS 1.3? If not, we'd want to modify this as per below, right?

 

from:

 

switch $tls_version {
                    "769" -
                    "770" -
                    "771" {

to:

 

switch $tls_version {
                    "769" -
                    "770" -
                    "771" -
                    "772" {