Problem with SSL termination on LTM...

J.T.: You should be able to LB both ways using your iRule (with or without SSL termination).

 

 

The real issue is the one to which cmbhatt alluded: The state change to "Disabled" didn't do what you expected, most likely because persistence was enabled in the pool and you were testing from only 1 IP address.

 

 

Pool members & node addresses can be set to one of 3 states:

 

Enabled: Allows all connections

 

Disabled: Allows existing connections to continue, & accepts new connections with valid persistence tokens

 

Forced offline: Allows only existing connections to continue

 

 

To replicate the action of removing the server from the pool, set the state to "Forced offline" instead of "Disabled"

 

 

(Look for this topic as the inaugural effort for our new "Post of the Week" video series. Will post a link when it's up.)

 

 

HTH

 

/deb