Forum Discussion

PiotrL's avatar
PiotrL
Icon for Cirrus rankCirrus
Mar 14, 2019

Serverside https and http mixed connections

For one URI requests go to a https server (server ssl profile is on), for different URI requests should go to a http server (server ssl is off).

 

The problem comes up when first request goes to a https server and next request should go to a http server. Our ltm is wrongly trying to pass the request in the tcp session to https server, and after many seconds the request eventually goes as expected to a http server (when new clientside https session is set up). This causes long delays when loading some objects from a http server.

 

How can I force the ltm to route the request to a http server without delay ?

 

(Oneconnect profile is off, version 14.1.0.2)

 

  • How are you checking different URIs, are you using a policy or an iRule? Are you able to share your config?

     

  • You may need to add an LB::detach command before changing the pool you are using. It is possible that the load balancing decision is being made before the HTTP_REQUEST event is triggering meaning that it will only change when another tcp connection comes in and the load balancing decision is re-evaluated.

     

  • I always use a LTM policy. Everyting is workng fine there. Also with 14.1.0.2

     

    So our setup: create a https virtual server with default server ssl profile and oneconnect enabled.

     

    Add a LTM policy and create a rule with URI mapping, destination pool and serverssl disabled, if necessary. If you want, create a default rule for forwarding to your default pool, but thats not necessary.

     

    We always add a default pool. Without, the virtual server has status unknown.

     

    Thats it.

     

    We are fresh on 14.1.0.2, but I don't see any trouble at the moment.