Redirection and DNS Masking

On what port is pool y.z.com listening? If different than 443, is port translation enabled?

 

Yes it is.

 

 

Have you done a tcpdump from LTM to see whether the RST is coming from the pool members or directly from the VIP? I'd be interested to see whether the 3-way handshake, and cert exchange are happening properly.

 

A good idea, will take a look at that now.

 

 

Have you checked your LTM logs to see whether we're throwing any errors?

 

Yes I have checked the logs, and there are no errors.