Forum Discussion
ShaneA_214896
Nimbostratus
Nimbostratus1 GBPS load balancing throughput
Can F5 provide minimum 1 Gbps load balancing throughput and can be scalable to 10 Gbps with license key without changing the hardware?
richard_77048Nimbostratus
NimbostratusIt sounds like you were sniffing traffic on the BigIP. Did you try sniffing traffic on the server? Does the traffic look any different.
Is there anything showing up in /var/log/ltm on the BigIP?
Try using an irule to log the request headers and compare the curl requests and requests coming through the browser.
Finally, I would try making the request from the DOS-based device using telnet (assuming it's available to you) and do all the same testing.
I test VIPs using wget/curl and telnet/netcat and haven't run into any issues like you are describing.
HTH
Richard
- The expiration information is part of the certificate. The iControl functions are there to manage the placement of the certificates on the BIG-IP and building SSL profiles with them.
You could use iControl to download the all certificate files and then decode the certificates looking at their expiration dates off box.
Alternatively, openssl is on the BIG-IP and can read the certificates. You could do a tmsh report and email it to youself in a cron job on the BIG-IP.
http://devcentral.f5.com/wiki/default.aspx/tmsh/CertificateReport.html
Lastly, Enterprise Manager does this for you if you are looking for a canned solution.
Hope that helped. 
Ohge_15615Thank you for the quick reply John! I am able to pull expiration data directly from the LB's for the .crt files, much like that example report builder you provided in your link, but the .cert files utilized by SSLClientProfiles do not show up in the results. I will start looking in to pulling the certs from the lb and decoding them with openssl, but my company is still really hoping there is an API based solution to accomplish this.
![\"F5](\"https://www.f5.com/content/dam/f5/f5-logo.svg\"){kind=logo}
