Multiple Certs, One VIP: TLS Server Name Indication via iRules

An age old question that we’ve seen time and time again in the iRules forums here on DevCentral is “How can I use iRules to manage multiple SSL certs on one VIP"?”. The answer has always historically...

Published Apr 05, 2011

Version 1.0

application delivery

disaster recovery

Colin_Walker_12

Historic F5 Account

Joined May 12, 2005

Colin_Walker_12

Historic F5 Account

Joined May 12, 2005

Icon for Nimbostratus rank

Nimbostratus

Sep 15, 2015

We have been advised that when using native SNI on a virtual server, adding or removing a ClientSSL Profile from the virtual will cause all certs on it to be removed and re-added, breaking connections to the VS. Is that the case with this iRule approach, or can that behavior be avoided when using this iRule?