Forum Discussion

F5_Freek_243545's avatar
F5_Freek_243545
Icon for Nimbostratus rankNimbostratus
Jan 18, 2016
Solved

Can we have multiple Client SSL profile on single VIP?

Hi There, Can we have multiple client SSL profile on single VIP? I am looking for some help on this. We need to have some rules like below. www.mywebsite.rain.com --> SSL Profile SSL_rain www...
iRules
LTM
security
ssl
F5_Freek_243545's avatar
F5_Freek_243545
Icon for Nimbostratus rankNimbostratus

There is a challenge that the client must support TLS SNI right? We have internet based clients and cant predict the nature of the clients.

 

Can we create an irule for the same ?

 

John_Alam_45640's avatar
John_Alam_45640
Historic F5 Account
Jan 19, 2016
i agree with cg4unix. In any case, the iRule itself cannot solve this issue because it does not see the hostname unless SNI is enabled and supported. Alternatives are wildcard or SAN certs. With wildcard certs you will have only one profile, the iRule can chose a pool based on the host name.