Forum Discussion

ryan_rockwell_1's avatar
ryan_rockwell_1
Icon for Nimbostratus rankNimbostratus
Nov 19, 2013

Multiple virtual servers with same IP and port but different certificates

Ok stupid question time. Is there a way to create multiple virtual servers with the same IP and port but with different certificates? I can't think of a way and we have one site that has 3 different...
design
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 19, 2013

Basically, no. There can only be one VIP with a specific IP/port combination (not counting TCP vs. UDP). Your only real options are:

 

  1. SAN or wildcard certificate in the client SSL profile, or SNI if all clients can support TLS, and

     

  2. An iRule that switches pools based on the host name in the request.