For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

williamcs's avatar
williamcs
Icon for Nimbostratus rankNimbostratus
Sep 04, 2023

Persistence for https

How to remain the client to the same pool member in the https traffic if not enable ssl profile in F5? I have tried cookie persistence but failed because I don't enable client ssl profile. I have tr...
application delivery
Mohamed_Salah_'s avatar
Mohamed_Salah_
Icon for MVP rankMVP
Sep 04, 2023

Hello,

I think you can try terminating SSL connection by adding SSL profile, as the best way for http persistence is the cookie option. And as you mentioned, you cannot use it without SSL profile.

or you can try changing the source address settings to increase the mask from /32 to /24 for example, to match on larger range of IPs instead of one. so if a client IP changed but within the subnet, F5 can still find a match for the client.

Thanks,