Forum Discussion

SteveD1979's avatar
SteveD1979
Icon for Cirrostratus rankCirrostratus
Aug 01, 2024

Help with SNI for multiple VIPs hosted on same server

Hi I wanted to see if someone could help me with this setup.  I've configured other VIPs in the past to use SNI by running this command and then creating the ssl profile with the hostname.   tmsh m...
application delivery
SteveD1979's avatar
SteveD1979
Icon for Cirrostratus rankCirrostratus

I'm doing it through the GUI as well.  I'm following these two articles the same as i set it up for two other applications.  This one is just kind of different because all of the apps on the server have their own FQDN pointed to a different IP address so there really isn't the standard need for SNI.  Maybe if i just remove the SSL profiles all together and let it passthrough and the server handle the routing?

 

 

https://my.f5.com/manage/s/article/K39408450

 

https://my.f5.com/manage/s/article/K13452

zamroni777's avatar
zamroni777
Icon for Nacreous rankNacreous
Aug 07, 2024

yes, you dont need sni setting in the client side ssl profile.

however, it is still better to do client side ssl termination in f5
so f5 can do http layer optimization such as httpv2/v3, compression offload, caching, etc.