Multiple Certs, One VIP: TLS Server Name Indication via iRules

An age old question that we’ve seen time and time again in the iRules forums here on DevCentral is “How can I use iRules to manage multiple SSL certs on one VIP"?”. The answer has always historically...
Published Apr 05, 2011
Version 1.0
adn
application delivery
availability
BIG-IP
code
dev
devops
disaster recovery
iRules
management
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Sep 17, 2017

@Raphael, BIGIP supports SNI from version 11.1. from previous versions, this irule was the only solution to filter Servername

then, SSL::sin is only available from version 12.0, so between 11.1 and 12.0, to get Server name, you had to replace 

SSL::sni name
by 
[string range [SSL::extensions -type 0] 9 end]

For your information, I tried 

[SSL::sni name]
in version 13.0 HF2 and it did not return any value.