Forum Discussion
clientless mode making issue
we have published web-service application under one VIP which clientless mode "1" irule using and mapped the default pool member,its working fine as expected in browser as well as soap tool.
We tried to add one more application in the same vip,ie external single domain [https://sanjai.split.com/] and internal 2 different doamin http://abd.com/ws and http://kdm.com/ed
We used clienless mode plus additional irule by uri contains "/ws" goto pool member1 and /ed to pool member2 and rewrite to internal domain also. but its resetting the connection in the handshake.
Could you anyone assistance on this
2 Replies
Hi Sanjai,
I'd like to recommend to temporary rule out APM (e.g. via
for a specific Client IP) to see if your LTM is already able to route the request correctly.ACCESS::disableIf you're required to switch pools/nodes based on the provided URI you have to apply a OneConnect Profile (recommended) or
the connection before each node selection (not optimal) to allow LTM to switch the server side connections as needed.LB::detachIf this is working stable and the request are able to pass to every single web application, then you should reenable APM and tweak the SSO profiles as needed. Keep in mind, that in combination with OneConnect you're limited to NTLM, Basic, Forms SSO or something homegrown that doesn't require a Session_based-Authentication. If NTLM is used, then you have to attach a NTLM profile to allow LTM to reuse idle OneConnect connections on a per-user basis.
Cheers, Kai
- Stanislas_Piro2
Cumulonimbus
Hi,
Is your SOAP request greater than 64K?
The clientless mod limit request size to 64K during authentication, this limit can be change since version 11.5
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com