Fixes for issue 2438

ansible_collections/f5networks/f5_modules/plugins/modules/bigip_device_info.py

@@ -7348,6 +7348,12 @@
       returned: queried
       type: str
       sample: /Common/pool1
+    serverssl_use_sni:
+      description:
+        - Specifies whether SNI is enabled or disabled on the server-side SSL connection.
+      returned: queried
+      type: bool
+      sample: true
     status_reason:
       description:
         - If there is a problem with the status of the virtual, it is reported here.
@@ -17110,6 +17116,7 @@ class VirtualServersParameters(BaseParameters):
         'rateLimitSrcMask': 'rate_limit_source_mask',
         'rateLimitDstMask': 'rate_limit_destination_mask',
         'rateLimit': 'rate_limit',
+        'serversslUseSni': 'serverssl_use_sni',
         'sourceAddressTranslation': 'snat_type',
         'gtmScore': 'gtm_score',
         'rateClass': 'rate_class',
@@ -17149,6 +17156,7 @@ class VirtualServersParameters(BaseParameters):
         'rate_limit',
         'snat_type',
         'snat_pool',
+        'serverssl_use_sni',
         'gtm_score',
         'rate_class',
         'rate_limit_destination_mask',
@@ -17592,6 +17600,14 @@ def snat_pool(self):
             elif self._values['snat_type']['type'] == 'snat':
                 return self._values['snat_type']["pool"]
 
+    @property
+    def serverssl_use_sni(self):
+        if self._values['serverssl_use_sni'] is None:
+            return None
+        if self._values['serverssl_use_sni'] == 'enabled':
+            return 'enabled'
+        return 'disabled'
+
     @property
     def connection_mirror_enabled(self):
         if self._values['connection_mirror_enabled'] is None:

ansible_collections/f5networks/f5_modules/plugins/modules/bigip_virtual_server.py

@@ -240,6 +240,12 @@
       - To remove SNAT, specify the word C(none).
       - To specify automap, use the word C(automap).
     type: str
+  serverssl_use_sni:
+    description:
+      - When C(enabled), specifies whether SNI is enabled on the server-side SSL connection
+      - When C(disabled), specifies whether SNI is disabled on the server-side SSL connection
+      - When creating a new virtual server, the default is C(disabled).
+    type: bool
   default_persistence_profile:
     description:
       - Default profile which manages the session persistence.
@@ -835,6 +841,11 @@
   returned: changed
   type: str
   sample: Automap
+serverssl_use_sni:
+  description: Specifies whether SNI is enabled or disabled on the server-side SSL connection.
+  returned: changed
+  type: bool
+  sample: true
 source:
   description: Source address set on the virtual server, in CIDR format.
   returned: changed
@@ -982,6 +993,7 @@ class Parameters(AnsibleF5Parameters):
         'fwStagedPolicy': 'firewall_staged_policy',
         'securityLogProfiles': 'security_log_profiles',
         'securityNatPolicy': 'security_nat_policy',
+        'serversslUseSni': 'serverssl_use_sni',
         'sourcePort': 'source_port',
         'ipIntelligencePolicy': 'ip_intelligence_policy',
         'rateLimit': 'rate_limit',
@@ -1009,6 +1021,7 @@ class Parameters(AnsibleF5Parameters):
         'rules',
         'source',
         'sourceAddressTranslation',
+        'serversslUseSni',
         'serviceDownImmediateAction',
         'vlans',
         'vlansEnabled',
@@ -1057,6 +1070,7 @@ class Parameters(AnsibleF5Parameters):
         'profiles',
         'service_down_immediate_action',
         'snat',
+        'serverssl_use_sni',
         'source',
         'type',
         'firewall_enforced_policy',
@@ -1096,6 +1110,7 @@ class Parameters(AnsibleF5Parameters):
         'profiles',
         'service_down_immediate_action',
         'snat',
+        'serverssl_use_sni',
         'source',
         'vlans',
         'vlans_enabled',
@@ -2169,6 +2184,14 @@ def snat(self):
         snat_pool = fq_name(self.partition, self._values['snat'])
         return dict(pool=snat_pool, type='snat')
 
+    @property
+    def serverssl_use_sni(self):
+        if self._values['serverssl_use_sni'] is None:
+            return None
+        if self._values['serverssl_use_sni']:
+            return 'enabled'
+        return 'disabled'
+
     @property
     def default_persistence_profile(self):
         if self._values['default_persistence_profile'] is None:
@@ -2532,6 +2555,14 @@ def snat(self):
         result = self._values['snat'].get('pool', None)
         return result
 
+    @property
+    def serverssl_use_sni(self):
+        if self._values['serverssl_use_sni'] is None:
+            return None
+        if self._values['serverssl_use_sni'] == 'enabled':
+            return True
+        return False
+
     @property
     def destination(self):
         params = ApiParameters(params=dict(destination=self._values['destination']))
@@ -3722,6 +3753,7 @@ def __init__(self):
             pool=dict(),
             description=dict(),
             snat=dict(),
+            serverssl_use_sni=dict(type='bool'),
             default_persistence_profile=dict(),
             fallback_persistence_profile=dict(),
             source=dict(),