Forum Discussion
Chuck_Adkins_13
Nimbostratus
Nimbostratusconnection mirroring with SSL
Is there anyway to mirror SSL connections to a standby unit so that established connections will remain after a failover?
From the BIGIP Network Systems Mgt guide it would appear not:
You cannot mirror Secure Sockets Layer (SSL) connections.
...connections are dropped when an active unit becomes unavailable, unless you have enabled connection mirroring.
The connection mirroring feature on the BIG-IP system duplicates a unit’s state (that is, real-time connection and persistence information) on the peer unit. When connection mirroring is enabled, failover can be so seamless that file transfers can proceed uninterrupted and your servers can generally continue with whatever they were doing at the time of failover.
- We here at DevCentral are the folks who work on the APIs (iControl and iRules). If you have a question about building iControl apps or writing iRules, this is the place for you. As the disclaimer above the forums states: this isn't a place for product technical support. You'll need to talk to the folks in our product support department for questions like these...
With that being said, if the admin guide says it can't be done the odds are it can't (unless it's a added feature that didn't make it into the admin guide - but I don't think so in this case.). I would hop on over to ask.f5.com and see if you can find anything out in the product manuals, solutions, or via the normal support channel.
-Joe
