Antonio_Varni
Aug 18, 2010Nimbostratus
'generic' detect SSL::mode irule
I swear I had this working a long time ago on 9.4.
I'm on 10.2 now and currently have a default irule that we use for all vips (http and https) as well as an additional irule we use for all https vips that simply does:
rule insertHeader_sslInfo {
when HTTP_REQUEST {
HTTP::header replace SSLMode "True"
}
so our back end apps know the connection between the client and load balancer is secure.
I want to fold this irule into our 'default' irule like:
when HTTP_REQUEST {
if { [SSL::mode] == 1 } {
HTTP::header replace SSLMode "True"
}
But I get the error when I try to apply this to HTTP vips:
" SSL::mode in rule (irule-default-test) requires an associated SERVERSSL or CLIENTSSL profile on the virtual server (example.com-http)."
Is there any other way I can accomplish this?
tia!