Forum Discussion

sandiksk_35282's avatar
sandiksk_35282
Icon for Altostratus rankAltostratus
Mar 14, 2015

Issue with a VIP ,http works fine https is partially working

attaching the config on cisco load balancer and trying to migrate the config on F5. But having hard time getting the VIP work with both HTTP and hTTPS traffic.

 

VIP : 192.168.10.5 8080 pool members : server1 :192.168.10.20 8080 server2 : 192.168.10.21 8080 server3: 192.168.10.22 8080

 

tried with both http profile and fastl4 profile but still no luck. Enabled automap

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
devops
iRules
LTM
Security
TMSH
  • SynACk_128568's avatar
    SynACk_128568
    Mar 14, 2015

    Hi Sandisks ,

     

    I think if you apply http profile you tell LTM to parse traffic at layer 7 . so if https traffic is sent LTM , it is not able to understand and TMM resets the connection .

     

    You can try to take packet capture and see what is happening .

     

    You can try removing http and apply fastl4 profile if http profile is not needed .

     

    Thanks

     

  • SynACk_128568's avatar
    SynACk_128568
    Icon for Cirrostratus rankCirrostratus
    Mar 14, 2015

    Hi Sandisks ,

     

    I think if you apply http profile you tell LTM to parse traffic at layer 7 . so if https traffic is sent LTM , it is not able to understand and TMM resets the connection .

     

    You can try to take packet capture and see what is happening .

     

    You can try removing http and apply fastl4 profile if http profile is not needed .

     

    Thanks

     

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Mar 15, 2015

    if you do not use any layer 7 functionality such as cookie persistence, you do not need http profile (e.g. use only tcp profile or fastl4 profile).