Forum Discussion

sachin_80710's avatar
sachin_80710
Icon for Nimbostratus rankNimbostratus
Dec 30, 2014

Oneconnect for LDAP Virtual server

Hi all, We have virtual server to load balance LDAP server pool. I need suggestion, Oneconnect profile can be applied to our LDAP virtual server ? or Oneconnect is only for http virtual servers?   ...
application delivery
deployment
LTM
shaggy's avatar
shaggy
Icon for Nimbostratus rankNimbostratus
Dec 30, 2014

https://support.f5.com/kb/en-us/solutions/public/7000/200/sol7208.html has some good information in the recommendations section, including:

 

  • Avoid using a OneConnect profile for non-HTTP virtual servers that process more complex transactions, such as FTP or RTSP. Doing so may result in traffic disruption and session failure. Even for simple non-HTTP protocols, an iRule may be required to manage connection reuse.
  • The OneConnect profile may be used with any TCP protocol, but only when applied to virtual servers that process simple request/response protocols where transaction boundaries are explicitly obvious, such as those in which each request and each response is contained within a single packet.
  • Avoid using a OneConnect profile for encrypted traffic that is passed through the virtual server to the destination resources in the encrypted state and is not terminated at the BIG-IP system.

For more LDAP load balancing info, check out Collin Walker's article https://devcentral.f5.com/articles/unbind-your-ldap-servers-with-irules