For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mnb_63148's avatar
mnb_63148
Icon for Nimbostratus rankNimbostratus
Sep 17, 2014

Failover visibility

If an LTM fails over, will a user notice the drop if the user is connected over SSL? Will the user have to log in again after failover on an SSL page?   Thanks.  
pete_71470's avatar
pete_71470
Icon for Cirrostratus rankCirrostratus
Sep 17, 2014

Terminated SSL doesn't mirror but unterminated SSL can. SSL for a virtual is terminated on the appliance if you have client ssl profile attached.

 

Perhaps more important than mirroring for you might be persistence mirroring. During a failover all terminated SSL sessions are dropped, and without compatible persistence being mirrored (or cookie persistence without mirroring) there is a good chance clients connecting to the newly Active unit will find themselves balanced to a different pool member (causing users to find they have to log in again) because the newly Active unit wouldn't be aware of the previous load balancing decision.