For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cathy_123's avatar
cathy_123
Icon for Cirrostratus rankCirrostratus
Oct 17, 2016

ProxyPass Dynamic ServerSSL

Hello Guys!

I have an issue with ProxyPass Dynamic ServerSSL Profiles can someone explain how to use this?

I have an error on my Proxypass and I need to insert serverssl before i can communicate to my pool

setting on my datagroup example

www.f5.com/ask =; www.devcentral.com/ https_pool_devcentral

for the devcentral pool i need serverssl before I can access its nodes if I dont enable the serverssl I am having an error 

`Bad Request

Your browser sent a request that this server could not understand.
Reason: You're speaking plain HTTP to an SSL-enabled server port.
Instead use the HTTPS scheme to access this URL, please.`

Please help how to use ProxyPass Dynamic ServerSSL

Thanks!

BIG-IP
devops

3 Replies

  • Andras_Kis-Szab's avatar
    Andras_Kis-Szab
    Icon for Nimbostratus rankNimbostratus
    Dec 17, 2016

    Have you created a ProxyPassSSLProfiles data group with the SSL instructions for pools, please? Add "https_pool_devcentral server-ssl" at least...

     

  • cathy_123's avatar
    cathy_123
    Icon for Cirrostratus rankCirrostratus
    Jan 23, 2017

    Hello Andras,

     

    Thanks for your reply. it is now working :)

     

    My string was incorrect I should input the partition where our pool was located in our case it was "Common"

     

    Thanks again!

     

  • cathy_123's avatar
    cathy_123
    Icon for Cirrostratus rankCirrostratus
    Mar 13, 2017

    Hello F5 Team,

     

    I know this is quite strange. If i enable the Proxypass in our VIP can anyone access our Physical servers outside our network? for example 10.x.x.x subnet can be accessed by any public IP let say 8.8.8.8 ?

     

    Hope someone will respond :)

     

    Thank you!