Forum Discussion
dragonflymr
Cirrostratus
Jan 26, 2016http and https members in one pool
Hi,
I wonder if there is a way to set pool so it has one member using http and another https. I am pretty sure it's not possible via VS settings as ServerSSL is global for VS - so either traffic...
Kai_Wilke
MVP
Jan 26, 2016Hi Piotr,
a pool is just a dump collection of IP:Port combinations, so you can mix :80 and :443 as you want. You can even pool different instances of the same node into one pool...
You're right, that you have to use an iRule to selectively control the server side SSL Profile. I guess using the
[TCP::remote_port] in combination with the [SSL::enable] or [SSL::disable] command would be an good way to distinguish between the different types of pool members. So you may try this snippet as a starting point...
when SERVER_CONNECTED {
if { [TCP::remote_port] equals "443" } then {
SSL::enable serverside
} else {
SSL::disable serverside
}
}
Cheers, Kai
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects