For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nov1ce_120072's avatar
nov1ce_120072
Icon for Nimbostratus rankNimbostratus
Feb 05, 2013

https load balancing with active/standby pair setup

Hello,   Sorry for the dumb question.   I have a pair of BIG-IP appliances and want to configure https load balancing.   BIG-IP-1: 10.10.10.2   BIG-IP-2: 10.10.10.3   Cluster BIG-IP: 1...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Feb 05, 2013

 

Q1. No. The site name MUST resolve to the IP of the Virtual Server.

 

Q2. The CN (Common Name) of the cert MUST be the FQDN of the DNS entry that resolves to the Virtual Server IP. (I'm ignoring things like alternate names & wildcards deliberately here to make it easier).

 

 

So you need to create a virtual server (VS) that has a separate IP from any of the others and place your actual web servers into a pool that is used by the virtual server.

 

 

H