Forum Discussion
Keep subdomain in FQDN node
Hi all, im trying to setup a node in the F5 which goes out to an external site using the FQDN. The issue im having is the F5 doesnt route to the full FQDN with the subdomain. For example, im trying to reach tlstest.paypal.com. However when i put that as the address of the node in the F5, it simply puts the IP and therefor the navigation doesnt work properly. Any thoughts on how to keep the tlstest part in the node? Im thinking a possible iRule is needed but dont know that for sure.
Thanks for any and all replies.
- Faruk_AYDINNimbostratus
Hi Brent,
Which version are you using? After 11.6.0, you can use FQDN for node istead IP and also auto-populate.
- arpydaysNimbostratus
The FQDN for the pool member will just make sure that the pool member IP is not static and will follow any changes in DNS, so pool member traffic will always be routed to the right IP address.
I think the issue your are having is that you website is expecting traffic destined for the FQDN not the IP. This is actually signalled to the website by the HTTP host header in the HTTP requests, which is taken from what you type in the browser. So if you type the IP in the browser and go the web server it rejects the traffic as the host header = xx.xx.xx.xx IP. If you type in tlstest.paypal.com in the browser it works as expected. When you type F5 VIP in the browser you are again setting the Host header to an IP address so when this is passed to the website it is not accepted. You can test this out by adding a hosts file entry on your client mapping the F5 VIP to tlstest.paypal.com and then browsing via the hostname. There may be various ways to achieve what you want depending on your environment. You could add internal DNS entries, set hosts file entries if it's a one off test setup or even use forwarding VSs.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com