For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MOHIT_125417's avatar
MOHIT_125417
Icon for Altostratus rankAltostratus
May 28, 2014

Diiference between HTTPS & HTTPS_443 monitors

Dear Techies,

 

Please clear me the difference between HTTPS & HTTPS_443 monitor.

 

6 Replies

  • https_443 can assign to wildcard (any) port pool member because port number is hardcoded in the monitor. 🙂

    root@(B6900-R69-S5)(cfg-sync Standalone)(Active)(/Common)(tmos) list ltm monitor https https_443
    ltm monitor https https_443 {
        cipherlist DEFAULT:+SHA:+3DES:+kEDH
        compatibility enabled
        defaults-from https
        destination *:https
        interval 5
        ip-dscp 0
        send "GET /\r\n"
        time-until-up 0
        timeout 16
    }
    
    • MOHIT_125417's avatar
      MOHIT_125417
      Icon for Altostratus rankAltostratus
      Nitass it will be really helpful for me if you clear it by giving a example. thanks....
  • https_443 can assign to wildcard (any) port pool member because port number is hardcoded in the monitor. 🙂

    root@(B6900-R69-S5)(cfg-sync Standalone)(Active)(/Common)(tmos) list ltm monitor https https_443
    ltm monitor https https_443 {
        cipherlist DEFAULT:+SHA:+3DES:+kEDH
        compatibility enabled
        defaults-from https
        destination *:https
        interval 5
        ip-dscp 0
        send "GET /\r\n"
        time-until-up 0
        timeout 16
    }
    
    • MOHIT_125417's avatar
      MOHIT_125417
      Icon for Altostratus rankAltostratus
      Nitass it will be really helpful for me if you clear it by giving a example. thanks....
  • The difference between HTTPS and HTTPS_443 monitors is in Alias Service Port. Alias Service Port * All Ports - for HTTPS monitor. Alias Service Port HTTPS - for HTTPS_443 monitor.

     

  • e.g.

    root@(B6900-R69-S5)(cfg-sync Standalone)(Active)(/Common)(tmos) create ltm pool foo members add { 1.1.1.1:any }
    
    root@(B6900-R69-S5)(cfg-sync Standalone)(Active)(/Common)(tmos) modify ltm pool foo monitor https
    01070622:3: The monitor /Common/https has a wildcard destination service and cannot be associated with a node that has a zero service.
    
    root@(B6900-R69-S5)(cfg-sync Standalone)(Active)(/Common)(tmos) modify ltm pool foo monitor https_443
    
    root@(B6900-R69-S5)(cfg-sync Standalone)(Active)(/Common)(tmos) list ltm pool foo
    ltm pool foo {
        members {
            1.1.1.1:any {
                address 1.1.1.1
                session monitor-enabled
                state checking
            }
        }
        monitor https_443
    }