Forum Discussion
F5 Issue with different ports
Hi,
We've enabled HTTPS on the F5 for SAP Portal 7.3 A request comes to the F5 in HTTPS format & the F5 redirects it to the Webdispatcher in HTTP format. Hence, no HTTPS configurations have been done on the Webdsip, Portal or the backend SAP systems.
The main Portal URL: https:\ep.domain.com\irj\portal works fine...(on 443) ep.domain.com takes the users to one of 2 webdispatchers (load balancing)...
We have an iView on port 8100...the issue is when we try https:\ep.domain.com:8100\sap\fcprt?app-config=spm... it doesn't work. Even http:\ep.domain.com:8100\sap...does not work. However, http:\webdispatcher internal hostname.domain.com:8100\sap...works fine.
8100 has been opened on the firewall...
I'm an F5 novice...please do advise if the 8100 URL needs registration or there's something else that we're missing...
Thanks a lot for your help ! Have a great day ahead...saba.
2 Replies
- Kevin_Stewart
Employee
The primary reason why it isn't working is because the browser is attempting to contact the service on port 8100, which you likely do not have a VIP for. You could technically open up the existing VIP to multiple ports, but probably the better bet is to proxy the traffic based on the URI. So for instance, if the URI for the iView always starts with "/sap", you could send the traffic to a different pool based on that request. Something like this:
when CLIENT_ACCEPTED { set default_pool [LB::server pool] } when HTTP_REQUEST { if { [string tolower [HTTP::uri]] starts_with "/sap" } { pool iview_pool HTTP::header replace Host "hostname.domain.com:8100" } else { pool $default_pool } }where iview_pool is a pool of servers listening on port 8100. Now you still may run into issues if the portal sends references to the iView using the original :8100 designation, for which you may need to resolve internally, or use a STREAM profile in an iRule to replace this with an externally accessible value.
- Saba_007_140621
Nimbostratus
Thank you so much Kevin... I'll liaison with the F5 team & let you know if we face any more issues...
Thanks again :) Happy Thursday ! saba.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com