NimbostratusCitrix SSL GW VIp
Have a question here that may seem remedial however having challenges creating a custom VIP on a F5 where SSL is decrypted, sent in the clear to some security reverse proxy devices (if the traffic was HTTP) and for the non-http traffic (ICA) we need to send it directly to the SSL GW backend(different pool).
We have this successfully working with a Netscaler(just as a LB) by attaching a content switch policy to the VIP that does: if http request then > security devices, else default pool is the SSL gw.
Our challenge on F5 is that if we create a HTTP VIP we can implement a irule but the non-HTTP traffic seems to be getting dropped. If we change it to a TCP VIP then we cannot attach an irule with HTTP functions.
SNIP:
when CLIENT_ACCEPTED { #Sets the default pool
pool pool-ctx-direct
}
when HTTP_REQUEST { #Changes the pool if an HTTP request is received.
pool pool-rp
}
Thx in advance for the help.
