Forum Discussion
Multiple SSL profiles/certs for network virtual servers
I'm not sure if any of your sites use a wildcard or UCC cert but what you can do is create one profile per certificate, instead of one for every virtual server, but this isn't always possible depending on your URLs. We had problems with people using the iApp for basic load balancing, the problem with it was that it generated new profiles for every virtual server and all of those profiles were the exact same as the default! It also created a new SSL Client profile for every website too, since most of the websites we were creating were sub-domains this didn't make much sense, especially with the fact we already owned a wildcard cert. This lead to tons of junk objects in our F5 that provided no real value. One of the first things I did was organize our SSL certs into profiles that I could reuse across different web servers. We went from having around 50 SSL Client profiles to 7.
With the other profiles like HTTP, compression, etc. we just changed those all back to default since none of those profiles had any settings that were different than the default.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com