Forum Discussion

xMadi's avatar
xMadi
Icon for Nimbostratus rankNimbostratus
Feb 09, 2018

SSL interception on F5

Hello,   I am planning to intercept SSL on F5 to certain web servers to apply some iRules based on HTTP Headers. Currently I have Virtual server for HTTPS for those web servers. If I understand t...
application delivery
LTM
Martijn_van_de1's avatar
Martijn_van_de1
Icon for Cirrus rankCirrus
Feb 09, 2018

xMadi,

 

You are correct. You need to upload a valid certificate and use it in the client-ssl profile. If you do not care about the internal certificate, you can use the serverssl-insecure-compatible profile.

 

Instead of an iRule, maybe you can you a policy for the HTTP header based operations.

 

Regards, Martijn.

 

  • xMadi's avatar
    xMadi
    Icon for Nimbostratus rankNimbostratus
    Feb 09, 2018

    Thanks. Well I will want to loadbalance on single Virtual server to different pools based on the HTTP Header field. Not sure if the HTTP Header based operations are suited for this.

     

    Marek

     

  • Martijn_van_de1's avatar
    Martijn_van_de1
    Icon for Cirrus rankCirrus
    Feb 09, 2018

    Marek,

     

    You should take a look at a LTM policy (Local Traffic -> Policies).

     

    You can create rule within a LTM policy that forwards traffic to a pool based on HTTP header. Off course you can do the same with an iRule, but if you can do it in the GUI, you should do it there.

     

    Good luck.

     

    Martijn.