Multiple Certs, One VIP: TLS Server Name Indication via iRules
An age old question that we’ve seen time and time again in the iRules forums here on DevCentral is “How can I use iRules to manage multiple SSL certs on one VIP"?”. The answer has always historically...
Updated Aug 28, 2025
Version 2.0
Stanislas_Piro2
Cumulonimbus
Cumulonimbus@Raphael, BIGIP supports SNI from version 11.1. from previous versions, this irule was the only solution to filter Servername
then, SSL::sin is only available from version 12.0, so between 11.1 and 12.0, to get Server name, you had to replace
SSL::sni name[string range [SSL::extensions -type 0] 9 end]For your information, I tried
[SSL::sni name]