Forum Discussion
ssl handshake failed
If you want to specify a source IP address for a monitor, you'd need to use an external monitor. Here's a basic example we came up with for ICMP:
http://devcentral.f5.com/wiki/default.aspx/AdvDesignConfig/ICMPCustomSourceAddressMonitor.html
I'm not sure what client utility you could use that would allow specifying the source IP address though. curl doesn't seem to support it:
http://curl.haxx.se/docs/faq.html
5.12 Can I make libcurl fake or hide my real IP address?
netcat does seem to support it:
http://nc110.sourceforge.net/
Some of netcat's major features are:
Outbound or inbound connections, TCP or UDP, to or from any ports
Full DNS forward/reverse checking, with appropriate warnings
Ability to use any local source port
Ability to use any locally-configured network source address
Aaron
- LiefZimmermanOct 14, 2024
Admin
Roberta_Geranio - if you resolved your issue please consider Mark As Solution to help others in the community find good information sooner.
Thanks,
Lief I think -5961 is the error code for connection reset, which is probably the default action when anything goes wrong in your traffic flow.
Do you have any iRule code attached to your virtual server? You see connection reset a lot when an unhandled error happens in an iRule.
If it is not too verbose, try looking in the /var/log/ltm file on the device itself.
For handling a specific error condition gracefully in an iRule, look into the TCL catch statement.
- MikePollockApr 22, 2024
Altocumulus
You need the certificate and key on the F5 with a clientssl profile attached to the virtual server. Has that been verified?