F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jan 26, 2016

http and https members in one pool

Hi,   I wonder if there is a way to set pool so it has one member using http and another https. I am pretty sure it's not possible via VS settings as ServerSSL is global for VS - so either traffic...
devops
http
https
iRules
LTM
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 26, 2016

Hi Piotr,

a pool is just a dump collection of IP:Port combinations, so you can mix :80 and :443 as you want. You can even pool different instances of the same node into one pool...

You're right, that you have to use an iRule to selectively control the server side SSL Profile. I guess using the 

[TCP::remote_port]
in combination with the 
[SSL::enable]
or 
[SSL::disable]
command would be an good way to distinguish between the different types of pool members. So you may try this snippet as a starting point...

when SERVER_CONNECTED {
    if { [TCP::remote_port] equals "443" } then {
        SSL::enable serverside
    } else {
        SSL::disable serverside
    }
}

Cheers, Kai