For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

4 Replies

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Jun 10, 2014

    Hey Mahmoud, you have two options;

     

    • Create two Virtual Servers, one per port.
    • Create one Virtual Server with port ANY and use an iRule to switch SSL on or off (if you are terminating SSL) - you may also want to use either an iRule, AFM or packet filters to restrict the ports you don't want.
  • Mahmoud_Eldeeb_'s avatar
    Mahmoud_Eldeeb_
    Icon for Cirrostratus rankCirrostratus
    Jun 11, 2014

    please could you explain the second option in more details, also can I do it by adding multiple ports for a single node in a pool. to be used by VS

     

  • Techgeeeg's avatar
    Techgeeeg
    Icon for Nimbostratus rankNimbostratus
    Jun 11, 2014

    Hi Mahmoud,

     

    create the VS on each port 80 and 443 and use the irule to redirect the connection from 80 to 443. Disturbing LC configuration can be problematic better to consult with the team who have initially configured it for you.

     

    Regards

     

  • Mahmoud_Eldeeb_'s avatar
    Mahmoud_Eldeeb_
    Icon for Cirrostratus rankCirrostratus
    Jun 15, 2014

    Hi Techgeeeg, Thanks for your concern, Actually I was a team member while deploying LC. I'd like to discuss with you the possibility of having ssl-offloading on both LTM & LC, what do you see? what is the best? as we have a two boxes of LTM & Two boxes of LC for High Availability.