Forum Discussion

NoamRotter_1534's avatar
NoamRotter_1534
Icon for Nimbostratus rankNimbostratus
Jan 23, 2017

SSL offload in APM

I have a Virtual Server with both client and server SSL Profiles.

 

I have an APM policy to choose the correct pool according to land uri

 

some applications on the backend work with HTTPS and some work HTTP

 

HTTPS applications works good but HTTP application fail to load and I get "The page can't be displayed"

 

I have added this iRule to the virtual server to SSL Offload:

 

Code
when ACCESS_POLICY_COMPLETED {
set mylandinguri [ACCESS::session data get "session.server.landinguri"] 
if {$mylandinguri == "/something"} {
    node 10.10.10.10 80
    SSL::disable serverside
    log local0. ">>> $mylandinguri !!! NO SSL !!! <<<"
} 

}

Now, when I try to get to that HTTP application, I still get "The page can't be displayed"

 

And this is what I get in the LTM log file:

 

Code
Rule /Common/APM-ssl-offload : >>> /something !!! NO SSL !!! <<<
Connection error: ssl_null_parse:3109: record length too large (22)

So, I can see the iRule is fired up and SSL Offload does not occur.

 

 

 

Can you help?

 

 

Regards,

 

Noam.

 

1 Reply

  • Hi,

    Could you try this.

    when HTTP_REQUEST {
        if { [HTTP::uri] starts_with "/something"} {
            node 10.10.10.10 80
            SSL::disable serverside
            log local0. ">>> [HTTP::uri] !!! NO SSL !!! <<<"
            } 
    
        }
    

    Cheers,

    Kees