Forum Discussion

Rasman_75397's avatar
Rasman_75397
Icon for Nimbostratus rankNimbostratus
Feb 26, 2016

Disable HTTP2 profile from iRule?

Hi! We will implement HTTP2 since it's supported in version 12. There is one iRule assigned to VIP that requires SSL renegotiation. Renegotiation conflicts with HTTP2 and gives SPDY protocol error. T...
application delivery
http 2.0
iRules
LTM
ssltls
John_Alam_45640's avatar
John_Alam_45640
Historic F5 Account

Have you tried the vip-to-vip scenario. You will want to make sure the renegotiation iRule logic goes with the proper virtual.

when CLIENT_ACCEPTED {
    set collecting 0
    set renegtried 0
      Find out country tag
    set CountryID "[whereis [IP::client_addr] country]"
     internal proxy to another virtual
    if {$CountryID eq "EE"} {
                sharedvar CountryID
                virtual renegotiation_virtual
    }
}

HTH

John_Alam_45640's avatar
John_Alam_45640
Historic F5 Account
Mar 01, 2016
Note: this will remove HTTP2 profile from every connection coming from country in question but, you still only renegotiate for the special URI.