Forum Discussion

conrmahr_335682's avatar
conrmahr_335682
Icon for Nimbostratus rankNimbostratus
Oct 05, 2017

Force www to non-www on SSL

Can an F5 redirect a https request before the browser handshakes the cert? Having trouble with this iRule for redirecting https://www.domain2.org/folder. It should redirect to https://domain2.org/fol...
  • F5_Digger_13600's avatar
    Oct 06, 2017

    Potential solution would be to use SNI (https://devcentral.f5.com/articles/ssl-profiles-part-7-server-name-indication).

     

    As Jie said, SSL negotiation process occurs before HTTP event/process. Therefore whatsoever you need to terminate SSL before you do something with HTTP.

     

    With SNI, you can terminate multiple domain SSL (applying multiple client SSL profiles). After that, by using iRue, you can do whatever you want to do with HTTP.