For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SteveD1979's avatar
SteveD1979
Icon for Cirrostratus rankCirrostratus
Aug 01, 2024

Help with SNI for multiple VIPs hosted on same server

Hi I wanted to see if someone could help me with this setup.  I've configured other VIPs in the past to use SNI by running this command and then creating the ssl profile with the hostname.   tmsh m...
application delivery
SteveD1979's avatar
SteveD1979
Icon for Cirrostratus rankCirrostratus
Aug 05, 2024

I'm not sure what else you're asking for.  There are 8 apps all hosted on one Windows IIS server.  Each of those 8 apps has it's own unique VIP on the F5 with it's own unique IP address.  The VIPs all share the same client side SSL profile.  The server side SSL profile i'm updating to include the FQDN for each separate application in the server name field and giving each VIP it's own.

Paulius's avatar
Paulius
Icon for MVP rankMVP
Aug 06, 2024

Without being able to see the configuration that isn't working it's difficult to say why this isn't working for you. If you configured a default SNI SSL profile for each of those virtual servers then this should be working. The only thing I could see possibly being an issue is if you're doing backend SSL and the server is expecting an SNI from the F5.

  • SteveD1979's avatar
    SteveD1979
    Icon for Cirrostratus rankCirrostratus
    Aug 06, 2024

    The VIPs are set up with client and server side SSL profiles and then on the server in the SSL bindings each app/site has the SNI box checked and the same cert as the client side SSL on the F5 tied to each.