Forum Discussion
Nimbostratusone IP, one VIP, multiple tcp ports and multiple URLs to redirect with SSL off-loading
Hi, I've one public IP address and multiple URLs and ports to redirect with SSL certificates. General concept looks like this:
public IP X.X.X.X:TCP_PORT_1 -> VIP internal IP Y.Y.Y.Y :TCP_PORT_1 -> URL1 // SSL cert 1
public IP X.X.X.X:TCP_PORT_2 -> VIP internal IP Y.Y.Y.Y :TCP_PORT_2 -> URL2 // SSL cert 2
public IP X.X.X.X:TCP_PORT_3 -> VIP internal IP Y.Y.Y.Y :TCP_PORT_3 -> URL3 // SSL cert 3
...
Is there any possibility to process this traffic properly without making multiple virtual IP + ports ?
1 Reply
Brad_ParkerCirrus
Yes you can use all ports on the VIP and assign multiple Client SSL profiles with SNI enabled for each profile.
" target="_blank">https://support.f5.com/kb/en-us/solutions/public/13000/400/sol13452.html " target="_blank">https://devcentral.f5.com/articles/ssl-profiles-part-7-server-name-indication.
