Forum Discussion
Jason_11641
Mar 01, 2012Nimbostratus
https to specific pool member port
I was wondering if anyone here knows of a way to direct traffic from https to a particular server port in a pool. My issue is, I have 1 virtual server with a pool which has 1 server but has 6 ports o...
Mar 01, 2012
Where there's a will there's a way. First though, a little info on how your configuration will help. Based on your info, I'm assuming you have something like this
VIP (443)
+- POOL pool
+- POOL MEMBER 10.10.10.10:*
You have a VIP setup with a clientside ssl profile to decrypt the SSL traffic. In that VIPs settings, you have a pool setup with one member configured with a wildcard service port of "*". I'm assuming the wildcard port because you said it was listening on multiple ports and I'm not sure how to configure it otherwise.
If that's the case, you'll have to have some way to determine what the application you want routing to go to is. I'm going to assume it's based on the URI. You can then switch on the URI and manually assign the IP:port for the destination like this:
when HTTP_REQUEST {
switch -glob [HTTP::uri] {
"/app1/*" {
node 10.10.10.10 80
}
"/app2/*" {
node 10.10.10.10 81
}
"/app3/*" {
node 10.10.10.10 82
}
"/app4/*" {
node 10.10.10.10 83
}
"/app5/*" {
node 10.10.10.10 84
}
"/app6/*" {
node 10.10.10.10 85
}
}
}
In this case any requests to /app1/* will go to pool member 10.10.10.10 on port 80, /app2/* will go to port 81, etc.
Another option would be to create 6 pools with a member for each IP:PORT combo you have and use the "pool" command to assign routing to that application pool.
There are pros/cons to each approach but both should work for you.
Is this kind of what you were getting at?
-Joe
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects