Multiple Certs, One VIP: TLS Server Name Indication via iRules

An age old question that we’ve seen time and time again in the iRules forums here on DevCentral is “How can I use iRules to manage multiple SSL certs on one VIP"?”. The answer has always historically...
Published Apr 05, 2011
Version 1.0
adn
application delivery
availability
BIG-IP
code
dev
devops
disaster recovery
iRules
management
Nicola_DT's avatar
Nicola_DT
Icon for Nimbostratus rankNimbostratus
Jun 04, 2012
Hi,

 

tried this fantastic irule on V 11.1 HF2 and it does not work.

 

 

I have put some points of debug here and there and I see that the irule behaves correctly BUT when it comes to release the correct ssl profile for some reason it does not.

 

 

This is the code that has to be changed for V11, but I do not know how :/

 

 

129: set ssl_profile_enable "SSL::profile $ssl_profile"

 

130: catch { eval $ssl_profile_enable }

 

 

 

 

Can someone have a look into it ?

 

 

Thanx a lot,

 

Nicola.

 

 

PS on 10.2.3 it works perfectly :)