Forum Discussion
Wasim_Hassan_13
Nimbostratus
Dec 10, 2013HTTPS Load balancing
Hi,
I am trying to load balancing Citrix Access Gateway through the F5. MY F5 is in single arm mode. I have created the pool, Node and Virtual server. I can ping the VS and telnet on the port 443 ...
Wasim_Hassan_13
Nimbostratus
Dec 10, 2013Hi,
For the node If I am making Ping as a monitor node is showing up but my object to monitor the HTTPS service on the node so that in case of HTTPs service failure, F5 mark it down. but as per your suggestion i make the ICMP monitor for the node and HTTPS for the POOL but still POOL is showing down. though I can telnet from client machine on the vip successfully.
telnet 192.168.210.208 443 and ping is also working fine from the client machine. Is there anything to do with the cerficate or ssl profile. ???
- Peter_ZDec 10, 2013
Cirrus
Then the monitor is not working or the response is not coming back. Try telnet to 443 from the BIG-IP to the pool memebr directly, not from a user machine. If it works, then the default https_443 monitor needs to be adjusted. - Peter_ZDec 10, 2013
Cirrus
For the SSL profiles: if you don't intend to terminate SSL on the F5, you don't have to configure ssl profiles. - Wasim_Hassan_13Dec 10, 2013
Nimbostratus
From the command line I m typing this [admin@ENOCDC_F501:Active] ~ telnet 192.168.210.152 443 Trying 192.168.210.152... telnet: connect to address 192.168.210.152: Connection refused - Peter_ZDec 10, 2013
Cirrus
That's the reason - you can't connect to TCP 443 from the load balancer. - Wasim_Hassan_13Dec 10, 2013
Nimbostratus
I have one working VIP on F5 on port 80 and i am not able to telnet on port 80 on the node as well telnet 192.168.200.34 80 Trying 192.168.200.34... telnet: connect to address 192.168.200.34: Connection refused [admin@ENOCDC_F501:Active] ~
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects