Forum Discussion

ndupont_382983's avatar
Icon for Nimbostratus rankNimbostratus
Feb 05, 2019

F5 with SSL/TLS for JDBC queries (Apache Hive and Impala)

Hi all,

We are using F5 to load balance some Hadoop DB services (apache Hive and apache Impala) : if it's perfectly working unencrypted, we have a problem setting SSL offload (encryption between client and LB only) for JDBC queries (not HTTP). Below are the main diff between configurations

Unencrypted settings

  • Type : Performance (Layer 4)
  • Protocol Profile (Client) : fastL4_1h_idle_timeout
  • SSL Profile (Client) : none
  • SSL Profile (Server) : none
  • Default Persistance Profile : SrcAddr
  • F5 Port : 10000
  • Target port : 10000

Encrypted settings

  • Type : Standard (Performance Layer 4 can't be used with SSL/TLS)
  • Protocol Profile (Client) : proto_all
  • SSL Profile (Client) : /commonCompany
  • SSL Profile (Server) : none
  • Default Persistance Profile : SrcAddr
  • F5 Port : 10443
  • Target port : 10000

When connecting to the secured entry point, the behavior is quite unpredictable : sometimes it'll connect, sometimes the connection will hang while being established ending with a connection time-out error

Any hints ?

2 Replies

  • Problem solved with the following actions - Protocol Profile (Client) : switched to TCP with 1H idle timeout - Oneconnect profile : was set by mistake, switched to none


    -> This last setting was the root cause of the problem, oneconnect use for non-HTTP traffic should be avoided


    • Subrun's avatar
      Icon for Cirrostratus rankCirrostratus

      @ndupont 382983




      Can you share what are the monitor type you configured ? If possible can you share the monitor details ?


      Service port 10443 you used as HTTPS ?


      Are you using SSL Bridging or Offload ?


      If SSL Bridging do I need to install the cert at backend DataBase Server too ?