Change Protocol Profile (Client) via iRule

Question

Hi,&nbsp;
is it possible to change the Protocol Profile (Client) via iRule for a specific source network?&nbsp;
Greetings &nbsp;

brad_11480 · Answer

Yes it can be done. This probably answers your question.&nbsp;
https://devcentral.f5.com/questions/irule-to-select-different-ssl-profiles-based-on-the-client-ip-address&nbsp;

mwi_328383 · Answer

No, unfortunately not. I need to change the "Protocol Profile (Client)" not the SSL Profile&nbsp;

surgeon · Answer

You can create multiple VIPs with specific profiles  and then redirect request to a specific VIP based on src network  
&nbsp;
https://devcentral.f5.com/wiki/iRules.virtual.ashx&nbsp;
You can use enable option for profiles. I am not sure if it works&nbsp;
https://devcentral.f5.com/wiki/irules.dns__enable.ashx&nbsp;
https://devcentral.f5.com/wiki/irules.html-enable.ashx&nbsp;
https://devcentral.f5.com/wiki/irules.http__enable.ashx   
&nbsp;
Search for keyword ::enable&nbsp;

Forum Discussion

Change Protocol Profile (Client) via iRule

3 Replies

Recent Discussions

Chrome V 124+ on MacOS - Virtual Server Access Issue

F5Access | MacOS Sonoma

Transaction looks successful but file not downloading

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

F5 Access Guard Deprecated: ZTA APM

Related Content

SSL protocol mismatch

Client SSL Profile

protocol profiles

Client vs Server SSL profile

AFM Protocol Inspection rules for CVE-2022-3602 (aka SpookySSL)