SSL Profiles Part 7: Server Name Indication

This is the seventh article in a series of Tech Tips that highlight SSL Profiles on the BIG-IP LTM.  The other articles are: SSL Overview and Handshake SSL Certificates Certificate Chain Impl...
Updated Mar 24, 2023
Version 2.0
LTM
security
series-the-ssl-profile
ssl
tech tip
Neeraj_Jags_152's avatar
Neeraj_Jags_152
Icon for Cirrus rankCirrus
Sep 30, 2016

John

your wrote below :

Require Peer SNI support requires that all network peers provide SNI support as well. If you enable both "Default SSL Profile for SNI" and "Require Peer SNI Support," the system terminates the connection when the client provides no SNI extension. The default for this setting is unchecked.

Could you explain what is SNI extension and how client provides it and how LTM detects it, moreover, if I want to use iRule for that, what is parameter name ?