Forum Discussion
File download problem with vip+SSL
Hello all Setup : Vip(443)+SSL cert client , automap,standard https profile pool 2 nodes on port 80 Everything is green ,monitor is working . But when user try to download file ( pdf 200kb or 2mb )he sometimes is able download 150kb or 1 mb from those files and then traffic fails . When VIP with port 80 was created and same pool was attached he was able to download those files. I tried to do tcpdump and i see resets from server side . And i am not sure what else i can check/change to make it work on port 443 for vip any ideas ?
7 Replies
- JG
Cumulonimbus
Any error messages in /var/ltm?
- slesh_219299
Cirrus
Hi No nothing :( We also tried to put SSL on server side and it was working so we set up vip 443 and pool 443 But we need to have SSL on LB The app is called formpipe which is used for download .
- slesh_219299
Cirrus
Our server guy was in contact with formpipe people and they told him that they never had SSL done on LB side every client who has their app is using SSL on server directly . So this might be problem from their side also but either way i would like to know HOW can i troubleshoot this to be sure - what i can add from my side is that , cert which we are using now is being used in LOTs of vips without any issues .
- JG
Cumulonimbus
You might want to check the parameters of your tcp profiles.
- Leonardo_Souza
Cirrocumulus
Try to add persistence to the virtual server, if you don't have yet.
For troubleshoot options, you can use tcpdump and ssldump:
https://support.f5.com/kb/en-us/solutions/public/0000/400/sol411.html
https://support.f5.com/kb/en-us/solutions/public/6000/500/sol6546.html
https://support.f5.com/kb/en-us/solutions/public/10000/200/sol10209.html
- slesh_219299
Cirrus
OK i am using standard profiles nothing custom what should i check in them than ?
- gdorantes_23583
Nimbostratus
I got the same problem please how do you resolved it or how do you tshot?
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com