Forum Discussion
Siva_107534
Nimbostratus
Jan 27, 2010Not able to connect the domain name behind LTM
Hi All,
Using forward proxy, i achieved the connectivity based on IP from the internal server to external world.
While i trying to connect the client end using the domain name, i am not able to connect.
Kindly any one help me out to solve this issue.
24 Replies
- hoolio
Cirrostratus
If you add a host file entry or DNS record which resolves the hostname to the VIP address and the client uses the hostname to make a request to the VIP, the client will set the Host header value to the hostname and the server should handle the request successfully.
Aaron - Siva_107534
Nimbostratus
Dear Aaron,
I can't understand the Host header value to the hostname . Can you pls help me out by providing an example - hoolio
Cirrostratus
Sure. If you use a browser or command line tool like curl to make an HTTP request using a hostname in the URL, the client (browser or CLI tool) resolves the hostname to an IP address and opens a TCP connection to the resolved IP address. The client sets the HTTP host header value in the HTTP request to the value of the hostname. If a user enters an IP address in the URL, the client inserts that IP address in the Host header value.
Here are two curl requests using a hostname and an IP address which demonstrates the different Host header values in the request:
$ curl -v www.google.co.uk
> GET / HTTP/1.1
> User-Agent: curl/7.19.6 (i686-pc-cygwin) libcurl/7.19.6 OpenSSL/0.9.8l zlib/1.2.3 libidn/1.15 libssh2/1.2
> Host: www.google.co.uk
> Accept: */*
$ curl -v 216.239.59.103
> GET / HTTP/1.1
> User-Agent: curl/7.19.6 (i686-pc-cygwin) libcurl/7.19.6 OpenSSL/0.9.8l zlib/1.2.3 libidn/1.15 libssh2/1.2
> Host: 216.239.59.103
> Accept: */*
So if you configure the client to somehow resolve the hostname you want in the Host header and the client uses that hostname in its HTTP request, the client will set the Host header to the hostname. This solution is ideal in that you don't need to modify your FastL4 VIP or using an iRule to change the requests.
Aaron - Siva_107534
Nimbostratus
Hi Aaron,
I am struggling to understand the above mentioned items and configuration too.If you don't consider my call as burden to clarify some doubts.Can you send your contact no to my mail id. I will make call to you.
My mail id linuxgurunathan@gmail.com - hoolio
Cirrostratus
Hi Siva,
Sorry, but I'm at a customer's site today, so I can't take non-work calls. Can you try testing the clientside configuration I've suggested and see if it works? Else, if you want support from F5, you could open a case with them.
Thanks,
Aaron - Siva_107534
Nimbostratus
Thanks Aaron, I will check client configuration otherwise i will open a case with F5. - Siva_107534
Nimbostratus
Hi Aaron,
If i configure Performance Layer 4, then how can achive the HTTP::host header replacement with domain instead of IP. becoz i trie d then the Virtual throws some error by not accepting the HTTP::host based iRule. - hoolio
Cirrostratus
If you want to rewrite the HTTP host in a request, you would need to configure a standard IP VIP with an HTTP profile.
However, I don't think that should be necessary if you add a host file entry or DNS record which resolves the hostname to the VIP address and the client uses the hostname to make a request to the VIP.
Aaron - Siva_107534
Nimbostratus
Hi Aaron,
Finally we achieved the outbound connectivity based on domain as per your suggestion, used simple http profile with automap to snat pool funcationality and used the below irule
when HTTP_REQUEST {
HTTP:;header replaces "Host" "www.abc.com"
} - Siva_107534
Nimbostratus
Hi Aaron,
Finally we achieved the outbound connectivity based on domain as per your suggestion, used simple http profile with automap to snat pool funcationality and used the below irule
when HTTP_REQUEST {
HTTP::header replaces "Host" "www.abc.com"
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects