Forum Discussion

Chuck_Adkins_13's avatar
Chuck_Adkins_13
Icon for Nimbostratus rankNimbostratus
Feb 13, 2006

Irule for directing clients to differnet pools

Overview:

 

 

client_type_a ---> VIP1 ---(SSL)--(ssl profile)--->

 

(CLEAR) ---> pool_a

 

 

client_type_b ---> VIP1 ---(SSL) ---> pool_b

 

 

I want to send two different clients (conceptually can be thought of as IE and Firefox) to a single IP address (VIP) and use an iRule to loadbalance client_a through a ssl profile and send clear text to pool_a. I want to loadbalance client_b to pool_b. pool_b is expecting SSL - those nodes will handle their own SSL - and pool_a is expecting clear-text - BIGIP will handle their SSL.

 

 

Is this possible?

 

 

1 Reply

  • It's possible if you can offload SSL for all clients, then send traffic to pool a in the clear and then use a server ssl profile to reencrypt traffic for pool b.