For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

N__197982's avatar
N__197982
Icon for Nimbostratus rankNimbostratus
Sep 19, 2017

F5 certificate not working for all ports.

Folks, We have a wild card certificate configured on the F5 and this certificate caters to a VIP which listens to all ports. i.e. http://hostname.externaldomain.com:**.   For some reasons the cert...
application delivery
LTM
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Sep 19, 2017

Hi N.,

 

You have the setting "translate-port disabled" this mean that the F5 will not translate the destination port.

 

  • If clients are connecting to 443 it will open connection on pool_member:443
  • If clients are connecting to 8080 it will open connection on pool_member:8080

When the "translate-port enabled" it will translate the port like the following :

 

  • If clients are connecting to 443 and you pool_member are listening on 80, F5 will translate the destination port, from 443 to 80. So it will open a connection on pool_member:80

So are you sure that is your need ?