Forum Discussion

Singh_74932's avatar
Singh_74932
Icon for Nimbostratus rankNimbostratus
Jun 06, 2008

SSh on 443

I was reading some docs and came to know that we can use F-secure like clients (may be putty )to connect to a BIG IP over 443.

 

 

I have my iRule Editor on my laptop which connects to my Big ip over the same port fine. Why putty is not working if i ssh to my big ip by selecting "ssh" and then changing port to 443 ?

 

 

Thanks

 

management
monitoring
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jun 06, 2008
    What are you trying to accomplish?

     

     

    Theoretically, you can configure a server application to listen on any port. Conceptually, the client can make a request to any destination port. However, the client and server must communicate using the same protocol. The BIG-IP is configured by default to listen on port 443 with Apache. The server expects the client to establish an SSL connection and then use either HTTP or the iControl API (based on SOAP) to communicate. The BIG-IP wouldn't handle an SSH connection attempt on port 443 though. Apache would reject the request as it's not a valid SSL request.

     

     

    I think what you might have read about was creating SSL tunnels. You can use PuTTY or other SSH tools to create an SSH tunnel and pipe through an unencrypted protocol. Here is a wiki page on tunneling (Click here). I can't see any reason you'd want to do this administer the BIG-IP though.

     

     

    Aaron
  • Singh_74932's avatar
    Singh_74932
    Icon for Nimbostratus rankNimbostratus
    Jun 06, 2008
    Thanks .. the reason for this is that our Big ip's are in remote DC with only web based access over https. As i am using iRUle editor so i got confused over 443.

     

     

    Let me go through the tunneling thing once.