For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

strongarm_46960's avatar
strongarm_46960
Icon for Nimbostratus rankNimbostratus
Oct 05, 2010

No server hello, no pool packets

when configured using port 80, everything works fine, as soon as I switch to SSL, pool side fails to send.     I am using automap. usedthe SSL profile on client and server side, From the tcpdum...
config
design
Chris_Miller's avatar
Chris_Miller
Icon for Altostratus rankAltostratus
Oct 05, 2010
Posted By strongarm on 10/05/2010 09:29 AM

 

Posted By Chris Miller on 10/05/2010 09:10 AM

 

Can you telnet from LTM to server:443 and do an HTTP GET?

 

May I suggest you re-read my query. Especially the openssl client test part.

 

 

many thanks.

 

 

Doing an openssl test doesn't simulate SNAT. When you sniffed, did you simply sniff from the pool member? I'd capture on the F5 while telnetting to :443 on your Virtual Server to make sure the first half of the connection works fine. With that capture, you should also see the F5 translate the source address and connect to the pool member.