Forum Discussion

Cathi_Hahn_3185's avatar
Cathi_Hahn_3185
Icon for Nimbostratus rankNimbostratus
Aug 12, 2006

I need to share 1 IP address with several pools

I would like to be able to share a single IP address with a number of different sites and different pools. We are trying to replace an appliance that does this today. It allow the dns entries to all point to 1.1.1.1 and then based on the URL - xx.domain.com or yy.domain.com or zz.domain.com send the request to the appropriate pool - xx, yy or zz.

 

 

Has anyone done this?

 

  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    You will need multiple VIPs for multiple certs.

     

     

    The SSL handshake takes place before the request containing the hostname is seen, so there is no opportunity to choose among different certificates while establishing the connection.

     

     

    /deb
  • Deb,

     

     

    After the SSL handshake takes place, is there a way to set the pool according to the https domain?

     

     

    I have a wildcard certificate so both login.mycompany.com & secure.mycompany.com resolve to the same IP address. Is there a way to then say:

     

    * https://login.mycompany.com goes to pool A

     

    * https://secure.mycompany.com goes to pool B

     

     

     

    I have this setup for http requests but cannot seem to get it working with https.
  • I was able to figure out what my problem was this morning. I had an iRule setup on my http virtual server but NOT on my https virtual server. Simple mistake on my part. I added the same rule to both and things worked!
  • I would like to extend this idea by using the switch command. However i am having some problems with the syntax.

    What I am using is:

    
    when HTTP_REQUEST {
    switch [HTTP::host] {
    server1.test.com { pool server1.test.com}
    server2.test.com{ pool server2.test.com}
    server3.test.com{ poolserver3.test.com }
    default {reject}
    }
    }

    but iam getting syntax errors. has anyone got anytips on how to fix this ?

    greg