Comments (4)
@kerryb48 , We do support multiple host and multiple client ssl profiles for virtual servers with TLSProfile. See this example if it fits your requirements.
Here you can define multiple hosts in TLSProfile for your virtual server CR.
from k8s-bigip-ctlr.
Created [CONTCNTR-4533] for internal tracking.
from k8s-bigip-ctlr.
@vklohiya This doesnt quite fit the requirement of what I am trying to accomplish. We use a single wildcard TLS cert, but I need the VS to forward for multiple hostnames to the same pool.
The problem is with the rules created as part of the Traffic Policy attached to the shared hostGroup virtualserver. The rule for each VirtualServer CRD has a match condition something like:
HTTP Header full string named 'host' is 'www.customservice.com:443', or 'www.customservice.com' at request time.
The hostname included in this forwarding rule comes from the "Host" parameter in the CRD VIrtualServer definition and does not support multiple hostnames. I am wanting this Traffic Policy rule to be able to match on multiple hostnames based on a Hosts array in the CRD VirtualServer declaration if possible. Hopefully this helps clarify.
from k8s-bigip-ctlr.
Completed and closed.
from k8s-bigip-ctlr.
Related Issues (20)
- RFE: Support user-defined/custom names for the virtual server created by CIS when using CRD hostGroup option. HOT 2
- RFE: Improve log 2024/01/31 09:41:47 [DEBUG] Updated Route xxx with TLSProfile HOT 2
- RFE: Improve log when admitting next gen routes HOT 2
- RFE: improve logs when checking certificate´s SAN HOT 4
- not appropiate handling of embedded certificates (spec cert) when missing SAN and hostnames mismatch HOT 1
- RFE: Improve SSL/TLS handling using embedded (spec) certificates and SSL/TLS profiles HOT 2
- [DOC]: TransportServer and VirtualServer snat field description HOT 1
- RFE: CIS 3.x to have per-router group cipher options HOT 2
- Headless Services not populating ConfigMap pool HOT 3
- Additional PoolMember properties in ConfigMap not preserved HOT 8
- RFE: Allow default CIS partition to be disabled HOT 3
- Multi-cluster CIS generates errors and downed pools HOT 2
- Support for AB App deployment within a single cluster using CRD HOT 3
- Override AS3 ConfigMap HOT 3
- NextGenRoute Controller to support TLS passthrough without SNI in client hello HOT 5
- EDNS doesnt work after 2.14.0 HOT 1
- Support for ICNIv1 has been removed from openshift4.13+ HOT 2
- Log in json format HOT 1
- CIS 2.15 crashes due to interface conversion panic HOT 1
- Cilium Static Route mode does not work HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from k8s-bigip-ctlr.