NimbostratusI have two VIPS. One VIP has port 80 and the same VIP also is configured for port 443. Behind these VIPS are severs that run websockets. I created an irule for the http that works but for the 443 it does not. Suggestions?
irule applied to the http VIP
when HTTP_REQUEST { if { ([HTTP::uri] starts_with "/socket.io") } { HTTP::disable } }
Cirrusdid you enable http profile on 443 vip also?
if not it acts like a passthrough and the irule won't work...
thx
Nimbostratus
EmployeeAlong with the http profile(which I assume you have configured based on the HTTP::disable command), you will be required to configure a clientssl and serverssl profile. As the traffic passing through the BIG-IP is encrypted without those, you will not see the URI.
If you are running v11.4.0 or higher, you should not have to disable the http profile as the BIG-IP code should account for WebSocket traffic and disable it automatically.
Eric
NimbostratusI have a clientssl, however can I use the default serverssl?
EmployeeYou should be able to use the default serverssl, or serverssl-insecure-compatible.
Eric