Forum Discussion
SteveD1979
Cirrostratus
CirrostratusHelp with SNI for multiple VIPs hosted on same server
Hi I wanted to see if someone could help me with this setup. I've configured other VIPs in the past to use SNI by running this command and then creating the ssl profile with the hostname. tmsh m...
zamroni777
Nacreous
Nacreousi suggest simply use the gui instead of tmsh cli.
you can see much more relevant config items in the gui.
f5 bigip is very application layer oriented, not network layer ones like cisco routers.
SteveD1979Cirrostratus
CirrostratusI'm doing it through the GUI as well. I'm following these two articles the same as i set it up for two other applications. This one is just kind of different because all of the apps on the server have their own FQDN pointed to a different IP address so there really isn't the standard need for SNI. Maybe if i just remove the SSL profiles all together and let it passthrough and the server handle the routing?
https://my.f5.com/manage/s/article/K39408450
- zamroni777
yes, you dont need sni setting in the client side ssl profile.
however, it is still better to do client side ssl termination in f5
so f5 can do http layer optimization such as httpv2/v3, compression offload, caching, etc.