Forum Discussion

Wasim_Hassan_13's avatar
Wasim_Hassan_13
Icon for Nimbostratus rankNimbostratus
Dec 10, 2013

HTTPS Load balancing

Hi, I am trying to load balancing Citrix Access Gateway through the F5. MY F5 is in single arm mode. I have created the pool, Node and Virtual server. I can ping the VS and telnet on the port 443 ...
deployment
design
management
Wasim_Hassan_13's avatar
Wasim_Hassan_13
Icon for Nimbostratus rankNimbostratus
Dec 10, 2013

Hi,

 

I m passing SSL back to the server pool I am not terminating the SSL on F5.

 

Yes I am able to telnet to the pool servers from the network on port 443. All the servers are up and in production and servering the clients through the Cisco CSS.

 

I am sure something wrong with the monitor and wrong with the F5 configuration for the load balancing.

 

  • Peter_Z's avatar
    Peter_Z
    Icon for Cirrus rankCirrus
    Dec 10, 2013
    Hello, you have assigned https_443 monitor to the ltm nodes. Note that the node is just the server address (IP addr) and has no service assigned to it. You need to assign https monitor to a POOL MEMBER (either to the pool itself and set 'inherit from pool' for all pool members, or for each member separately - which is less manageable). You can assign no monitor or simple ping monitor to NODE. Note that the NODE is a parent object to the pool member. If you set improper monitor to it and it will go down, it will bring ALL POOL MEMBERS using that node's address to DOWN state even if they receive a response to pool member healthcheck.