SSL::sni

Description

prior to version 11.6

Returns the “Server Name” attribute of the SSL profile currently selected. If the profile does not have this property set, the CN of the associated certificate is returned.

in version 11.6 and later

Returns the “Server Name” attribute of the SSL profile currently selected. If the profile does not have this property set, empty(null) value is returned.

Syntax

SSL::sni name
SSL::sni required

SSL::sni name

  • Returns the current Server Name Indication.

SSL::sni required

  • Returns the require SNI support.

Examples

when HTTP_REQUEST {
    log local0.info "SNI name: [SSL::sni name]"
    log local0.info "SNI required: [SSL::sni required]"
}
Sample log output:
<HTTP_REQUEST>: SNI name: f5.com
<HTTP_REQUEST>: SNI required: 1