Forum Discussion
NimbostratusHTTP HTTPS Proxy redirect question
Yes you can do this you create two virtuals using the same IP address one listening to port 80 and the other listening to port 443. The port 80 traffic will be sent to the server which will use the HTTP host headers to display the correct site just like now.
The problem comes with the HTTPS site you have two server each hosting the same sites? Is so put them in one pool and add both SSL certs to the Virtual using the link below
http://support.f5.com/kb/en-us/solutions/public/13000/400/sol13452.html?sr=32430737
The problem you will run into is if the client does not support TLS hostname then the LTM will not know which cert to pass back to the client and will pass back the default cert which in your case has a 50% chance of being the correct cert. Now if most of your clients support this you should not have a problem.
Nimbostratus
We are trying to execute a java application that accesses a service to check for credentials. The application needs to be launched from the F5, not from the client.
If we can't do this by launching an executable, then the next question was whether we could call Web Service from an iRule?
Thanks again.
amolariCirrostratus
tcpdump with filter on ntp shows anything?
Have you checked your routing + firewall (if any) inbetween?
Just to mention...NTP won't take management interface by default but follow the routing table. If you want to "force" it through management interface, you have to add management-routes. I've seen such case many times.
Omnix_TIMS_4122Hi amolari,
Great thanks brother, the issue was on management-routes which was not added for old and new IP in Standby F5. now both are working fine.
- shar_169852
Hi
I got this to work by adding specific routes even though I had a default management-route. Try this:
tmsh create /sys management-route MyNTPserver network x.x.x.x/255.255.255.255 gateway y.y.y.y tmsh save /sys config bigstart restart ntpd
Also, F5 documentation states:
"When the BIG-IP system starts, the ntpd process starts before the system loads the TMM network configuration, and the ntpd process attempts to use the management network to reach the NTP server. However, the attempt fails because the NTP server is on the TMM network."
(Reference: https://support.f5.com/kb/en-us/solutions/public/7000/000/sol7017.html)
Regards, Sharmeelan
- shar_169852*adjustment for spacing tmsh create /sys management-route MyNTPserver network x.x.x.x/255.255.255.255 gateway y.y.y.y tmsh save /sys config bigstart restart ntpd
![\"F5](\"https://www.f5.com/content/dam/f5/f5-logo.svg\"){kind=logo}
