Forum Discussion

elena_alberti's avatar
elena_alberti
Icon for Nimbostratus rankNimbostratus
Nov 14, 2014

irule with ProxySSL feature enabled is not worling

Hi, I understand that all SSL events are disabled when ProxySSL feature is enable in ssl profiles (client and server). Other question is, is it possible to make irule to send to different pools based on user agent? I tried to log user agent into HTTP_REQUEST event and I can obviously see it. When I try to send to pool If user agent match e condition it seems it does not work, is it correct? Someone know if it is possible to redirect traffic to diffente pools based on user agent (or something else) when using ProxySSL feature? What kind of event and irules can I use when ProxySSL enabled? So, what can I do when this feature is enabled? Thanks a lot Elena

 

application delivery
LTM

1 Reply

Sort By
  • Arnaud_Lemaire's avatar
    Arnaud_Lemaire
    Icon for Employee rankEmployee
    Jan 19, 2015

    Hello Elena, it doesn't surprise me, proxySSL is transparent to the SSL session establishment between client and back end server. The SSL connection is negociated directly by endpoints, and the bigip just come into play after that. This means that when you arrive at the l7 proxy for HTTP, you already have established opend ssl session between client and backend. We may eventually find a way to switch to another server with exactly the same SSL keys/cert but that would be a requierement i guess.