For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Subrun's avatar
Subrun
Icon for Cirrostratus rankCirrostratus
Aug 20, 2019

SNI based routing required ?

Hello,

 

I have 2 name need to be resolved with 1 IP Address . For example hostname TEST.COMPANY.COM and TEST1.COMPANY.COM need to be resolved with 1 IP . And both has individual certificate. I was thinking to resolve multiple SSL Hostname on 1 IP I need SNI based routing configuration. But before configuring SNI based routing I do see that I can open default webpage with both name. Just note that both name actually has same backend server.

 

Before SNI configuration, I configured only 1 SSL profile with default cert.

 

Based on my scenario do I still need to configure SNI based routing ?

5 Replies

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus

    Can you check if the certificate covers both domain names, e.g. a wildcard certificate ("*.company.com") or with SAN?

  • Subrun's avatar
    Subrun
    Icon for Cirrostratus rankCirrostratus

    Both certs will be generated individually , there is no wildcard cert or SAN planned to be configured for these 2 certs.

     

    Just note that at this moment , only ONE self signed cert configured.. Public CA generated cert will be installed for both names and called at the Virtual Server Configuration. So my point is when I will configure 2 SSL Profile on a single VIP do I need to SNI settings or not ?

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus

    You don't need SNI and multiple SSL profiles if you get a SAN certificate, or a wildcard certificate in this situation.

    • Subrun's avatar
      Subrun
      Icon for Cirrostratus rankCirrostratus

      Thank You.. Probably I am making the plan complex while thinking about SNI. But If I come up with individual SSL Cert then I need to do SNI right ?