F5Networks / f5-appsvcs-extension

F5 BIG-IP Application Services 3 Extension
Apache License 2.0
164 stars 53 forks source link

Add Support for serverssl-use-sni Option in Virtual Server Configuration #833

Open ppieprzycki opened 4 months ago

ppieprzycki commented 4 months ago

Is your feature request related to a problem? Please describe.

I would like to request support for the serverssl-use-sni enabled option within the Service_HTTPS configuration. This feature is usefull for handling scenarios where backend servers utilize Server Name Indication (SNI) with multiple certificates.

Describe the solution you'd like

I would like to see the equivalent functionality of the following command in the configuration: tmsh modify ltm virtual <virtual_server> serverssl-use-sni enabled

Additional context

For further details, please refer to the following Knowledge Base article: https://my.f5.com/manage/s/article/K13452

amolari commented 4 months ago

@ppieprzycki FYI I have opened a support case and received an existing ID 1579129 [RFE] Add support for 'serverssl-use-sni' option in TLS_Client

mdditt2000 commented 4 months ago

@ppieprzycki please refer to https://github.com/F5Networks/f5-appsvcs-extension/issues/274

We added a default value to under the SSL profile to select with is default. Use the serverssl-use-sni' option when having multiple. Pre AS3-44 the top profile would be default.

mdditt2000 commented 4 months ago

Closing this issue as resolved in AS3-44 as per above

wncocz commented 4 months ago

@ppieprzycki please refer to #274

We added a default value to under the SSL profile to select with is default. Use the serverssl-use-sni' option when having multiple. Pre AS3-44 the top profile would be default.

274 is for client-ssl profiles (TLS_Server) "inbound" SNI support.

This issue is for the new-in-BIG-IP-v15 server-ssl (TLS_Client) "outbound" SNI support.

Totally different features.

mdditt2000 commented 3 months ago

@ppieprzycki can we setup a quick call. I think i understand what you looking for but want to confirm. Please ping me m.dittmer@f5.com for 15 min zoom call. I want to add this in AS3-53 which begins early July!

sunitharonan commented 3 months ago

AUTOTOOL-4415 has been created for intrernal tracking