Forum Discussion

senthil's avatar
senthil
Icon for Nimbostratus rankNimbostratus
Oct 17, 2019

Irule to select server SSL profile based on Pool member

Is it possible to choose server SSL profile depends on pool member ?

 

F5 is running on 11.5.x vesion. Can someone confirm and help.

 

5 Replies

  • when LB_SELECTED {
      # Check if client IP address is 10.0.0.1
      if { [IP::addr [IP::client_addr] equals 10.0.0.1] } {
           # Enable serverside SSL
           SSL::enable serverside
           # Selecte serverside SSL profile
           SSL::profile serverssl-insecure-compatible
      } elseif { [IP::addr [IP::client_addr] equals 10.0.0.2] } {
           # Enable serverside SSL
           SSL::enable serverside
           # Selecte serverside SSL profile
           SSL::profile serverssl-insecure-compatible
      } else {
           # code
      }
    }

    F5 Networks iRule Event Order – HTTPS/SSL – Client & Server Side

    LB_SELECTED

    SSL::enable

     

  • madel's avatar
    madel
    Icon for Nimbostratus rankNimbostratus

    Guys ,

    Kindly i am having the same situation here , but i have one Virtual server and this Virtual Server has a mixed Pool Member some are using SSL and other required no SSL Profile

     

    so regrarding your Answer can it be applied on my situation , if so what the client IP you have provided your I rule answer is stand for can i Add the Pool Member IP in this filed ?

     

    Thanks In Advance

    • I'd say open a new thread and post your requirements with complete picture. Sure you'll get a solution.