iRule CMD usage clarification - SSL::SNI

Hi

[HTTP::host] will just return the Host Header. If you want SSL info, try playing around with SSL::extensions.

https://clouddocs.f5.com/api/irules/SSL__extensions.html

I wish I could fine a minute to get you the right iRule, but not sure I will have the time :)

Yonan

​Here it goes...

when CLIENTSSL_HANDSHAKE {
    log local0.info "CLIENTSSL_HANDSHAKE"
 
    set ext_exists [SSL::extensions exists -type 0]
    log local0.info "SSL extension type 0 exists: $ext_exists"
    if {$ext_exists} {
        set scan [binary scan [SSL::extensions -type 0] S1S1A4A* ext_type ext_len disc ext]
        
        #set sni_hostname [binary format H* $ext]
		log local0. "SSL server_name $ext"
    }
}