Forum Discussion
Qasim
Cirrostratus
CirrostratusSSL Passthrough.
Hi All, I need a little urgent help with SSL passthrough. Basically, I want to know how to achieve SSL pass through? as it stands, its not working. at the moment I have a VS listening o...
xRes
Cirrus
CirrusWhat kind of VS are you configuring? Standard? Forwarding? Attaching a http profile to Standard VS essentially makes it L7 VS (and makes traffic flow a little bit different then without http profile). Start with basic troubleshooting like verifying connectivity serverside using telnet/curl/nc (or whatever would work on your destination port/service you are loadbalancing to). SNAT is required when you would deal with assymetric routing - are you using SNAT pool or automap to float/non-float address?
QasimCirrostratus
CirrostratusHi Res,
I am using standard VS with http profile and yes, I am using SNAT pool. I can connect to the nodes in the pool using curl and telnet.
Do you think I should be using performance L4 type VS instead?
Regards
- xRes
I would start with setting client side http profile to none (to force your VS to establish TCP connection with serverside without waiting for client data) and setting the SNAT to automap (to exclude any problems with your SNAT pool).
- xRes
I think that at this point this is irrelevant whether you use standard or forwarding VS. Either way you are trying to full proxy a connection and SNAT and using forwarding VS gives you advantages of FastL4 profile - which we do not care about for now :)
- Qasim
Hi mate,
II removed the http profile and it started working.
Many thanks for your help!
Regards,