Irule for one VIP, one CERT but multiple pool members

Question

Hi all&nbsp;
Hopefully I can explain this properly but I am looking to create an iRule which accepts https request on one Virtual server with an SSL client profile associated with it. But I want the outgoing request sent to multiple pool member depending on the URL. &nbsp;
For example Consider that I have following 3 URL:
blog.example.com
forum.example.com
help.example.com all of them have an external DNS entry of 1.1.1.1  and an internal VIP of 192.168.1.1:443 and 80 (for redirect) with an SSL client profile. &nbsp;
I have 3 pools of servers poolmember-blog, poolmember-forum and poolmember-help. Is there an iRule which selects appropriate Pool member depending on SVI. If not please point me in the right direction.&nbsp;
Your help is much appreciated
Vishal&nbsp;

nitass · Answer

you can use irule or local traffic policy to send traffic to specific pool based on host header. in irule, you can get host header using HTTP::host command.&nbsp;
HTTP::host&nbsp;
https://devcentral.f5.com/wiki/iRules.HTTP__host.ashx&nbsp;
sol9800: Using an iRule to load balance HTTP requests to multiple pools&nbsp;
https://support.f5.com/kb/en-us/solutions/public/9000/800/sol9800.html&nbsp;
sol15097: Using the Local Traffic Policies feature to load balance HTTP requests to multiple pools&nbsp;
https://support.f5.com/kb/en-us/solutions/public/15000/000/sol15097.html&nbsp;

nitass_89166 · Answer

you can use irule or local traffic policy to send traffic to specific pool based on host header. in irule, you can get host header using HTTP::host command.&nbsp;
HTTP::host&nbsp;
https://devcentral.f5.com/wiki/iRules.HTTP__host.ashx&nbsp;
sol9800: Using an iRule to load balance HTTP requests to multiple pools&nbsp;
https://support.f5.com/kb/en-us/solutions/public/9000/800/sol9800.html&nbsp;
sol15097: Using the Local Traffic Policies feature to load balance HTTP requests to multiple pools&nbsp;
https://support.f5.com/kb/en-us/solutions/public/15000/000/sol15097.html&nbsp;

thi · Answer

Just remember to use either wildcard or SAN certificate to get smoother user experience with different host names and one certificate ;o)

thi · Answer

Just remember to use either wildcard or SAN certificate to get smoother user experience with different host names and one certificate ;o)

arie · Answer

Or SNI.

Forum Discussion

Irule for one VIP, one CERT but multiple pool members

6 Replies

Recent Discussions

MAC address not showing up in LLDP packet

F5Access | MacOS Sonoma

Active- Active HA setup

syslog server connection

Cannot see floating MAC address outside of ESXi

Related Content

Interrogate Pool Member Priority Group from iRule

iRule for multiple host to multiple pools and redirect path on one host.

DevCentral's Featured Member for April - Mihai Cziraki

DevCentral's Featured Member for March - Thomas Dahlmann

DevCentral's Featured Member for December - Mohamed Kansoh