For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bcarreker's avatar
bcarreker
Icon for Cirrus rankCirrus
Feb 12, 2020

1 VIP Handling Multiple Web App Services

I am in the process of migrating many web app services in Azure, behind a pair of F5s. Most of these web apps are behind an internal ASE. Any web app behind the internal ASE will respond to the same IP address. We are using a wildcard SSL cert which will be applied to the majority of them. What we're planning on implementing is:

  • Whichever web apps ends with https://x.x.army.mil; we will attach them to the same VIP, using the same client/server SSL profiles, and a rewrite profile which will rewrite the client URL to the correct server URL.

 

I would like to know is there any downside to this solution? We are using auto SNAT, which I believe allows us 65535 connections to this 1 VIP. Not entirely sure if this is true.

4 Replies