Forum Discussion

SID89's avatar
SID89
Icon for Nimbostratus rankNimbostratus
May 30, 2024

HTTPS health monitor with binary values

We have security appliances behind F5 as pool members. These requires probing with binary strings. We have configured "TCP" health monitor with send/receive strings as binary values in BIG-IP syntax ...
binary
health monitor
mtls
SID89's avatar
SID89
Icon for Nimbostratus rankNimbostratus
Jun 05, 2024

Hi Enes_Afsin_Al Thank you for looking into this. We have Thales HSM device behind F5 and that doesn't support GET or POST methods for probing. As I mentioned same binary string values (type TCP monitor) are working fine, however it doesn't when used with type HTTPS monitor with SSL profile (as a client certificate serving pool members). When enabled health monitor logging on HTTPS monitor, it fails to complete SSL handshake.