Forum Discussion

Christian_Czech's avatar
Christian_Czech
Icon for Nimbostratus rankNimbostratus
Dec 18, 2010

SSL:Profile: One VIP two Profiles

Hello,

 

I have one question.

 

I have one Virtual Server with one IP and one Port.

 

For example: VIP 1.2.3.4:443.

 

 

Now I have two http:host

 

https://abc.test.com IP 1.2.3.4 and

 

https://def.test.com

 

 

Now I have two ssl Profiles

 

One Profile ssl_abc and ssl_def.

 

 

Is therea waytoregulatethe appropriateprofileforeach URI-callbyiRule?

 

thanks four your help.

 

nebtir

4 Replies

  • The challenge is that you'd need the decryption to happen before you could even look at the URI so it'd be too late to select a different profile. Unless anyone else can think of something here?
  • In my meaning it didn't work, because I have different certificates.

     

    For each URI I have a own certificate and the loadbalancer decript the SSL.

     

     

    Okay so I have to use two different IP's to decrypt the SSL Traffic correctly.

     

    Or?

     

    Thanks for a short answer.

     

    Christian
  • Christian - I'm assuming you'll need two different Virtual Servers (2 different IPs) so you can handle this properly. At least I can't think of anything else.