For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
Dec 16, 2014
Solved

Multi-Domains mapped to single IP

Hi ALL, we have three domains , 1- domain1.hostname.com 2-domain2.hostname.com 3- domain3.hostname.com all mapped to single IP "VIP: 10.10.10.10" when I access domain1.hostname.com, it should give m...
application delivery
deployment
LTM
  • nitass_89166's avatar
    nitass_89166
    Dec 16, 2014

    when F5 forwards the request to back-end server it doesn't includes the domain name at all??

     

    by default host header is not changed. you can run tcpdump/ssldump on bigip to check.

     

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
Dec 16, 2014

the command is cleared the Host at the request for port 80 but for 443 didn't! I wasn't able to find out the Hostname.

 

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Dec 16, 2014
    for https, you have to use private key to decrypt it. ssldump -Aed -nni 0.0 -k host x.x.x.x and port 443
  • refra_151287's avatar
    refra_151287
    Icon for Cirrus rankCirrus
    Dec 16, 2014
    Private key if I'm using the default self signed certificate between the F5 and server "serverssl" what will gonna be private key?
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Dec 16, 2014
    it is server-side (between bigip and server), isn't it? private key should be from the server.
  • refra_151287's avatar
    refra_151287
    Icon for Cirrus rankCirrus
    Dec 16, 2014
    so how can I get that Private key from the server side?!
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Dec 21, 2014
    you may have to check with your server administrator.