Forum Discussion

François_Bégin_'s avatar
François_Bégin_
Icon for Nimbostratus rankNimbostratus
Mar 24, 2006

Stumped on iRule for SSL traffic

Hi,

 

 

I seem to be stumped here. I have an iRule that does re-direction based on HTTP:HOST.

 

 

when HTTP_REQUEST {

 

if { [HTTP::host] starts_with "billing.domain.com"} {

 

pool billing.domain.com_pool

 

} elseif { [HTTP::host] starts_with "hr.domain.com"} {

 

pool hr.domain.com_pool

 

}

 

 

This works fine for http traffic. I added another virtual server for https traffic and it does not appear to work. The SSL certs are on the servers in the two pools (not on the F5). I just want to use the F5 to load-balance the traffic.

 

 

Is this not working because the traffic from the client to the F5 is encrypted and the F5 cannot read [HTTP:host]? Is the only solution to terminate the SSL connection on the F5?
application delivery
dev
devops
iRules

1 Reply

Sort By
  • Joe_Pruitt's avatar
    Joe_Pruitt
    Mar 24, 2006
    The Host header is part of the payload and unless the BIG-IP is terminating the SSL connection, there is no way for it to read the payload for the header. So, yes, if you want to make decisions based on the payload content, the only option is to terminate the SSL connection on the BIG-IP.

     

     

    -Joe