Forum Discussion
zski128_101720
Nimbostratus
Sep 17, 2010No HTTP and HTTPs traffic over single VS?
Hello,
New to the forums. I am running 9.4.x and I am trying to setup a new virtual server listening on all ports (0). I have a pool of web servers assigned to this VS that are listening on bo...
L4L7_53191
Nimbostratus
Sep 19, 2010Rich: I would absolutely create separate VIPs here, for a few reasons:
1) You need persistence, but the services are totally different (even if the app is the same HTTP is different from HTTPS). I'd setup a 80 and 443 vip, terminate ssl, etc.
2) It's more secure this way. Explicitly exposing services is better than a wildcard (port 0) VIP. A wildcard will forward any port back to your servers - not ideal unless you absolutely need to do this.
3) Since 80 and 443 are different services, different vips help you customize profile behavior for a specific service.
-Matt
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects