Forum Discussion
Jim_M
Cirrus
Cirrussupporting a http2 sni website with f5 ltm?
I have a website which is working fine directly from browser to server. But not via f5 (v16.1.2). The session uses https 443, tls1.2, http2.0, and the server relies on SNI. When via F5, the client b...
P_Kueppers
MVP
MVPSo the problem is only that ur sending app.external.com to your node but you have this hostname not configured and your node only listen to server.internal.com? So a simple Hostname Header rewrite is enough? Then create a LTM Policy with when host is app.external.com rewrite to server.internal.com
iRule for logging? something like this
when HTTP_REQUEST_RELEASE {
log local0. "Client [IP::client_addr] This is the HTTP Host [HTTP::host]"
log local0. "Query string of URI: [HTTP::uri] is [URI::query [HTTP::uri]]"
}
Jim_MI suspect SNI is required. I have applied a host header rewrite but that wasnt sufficient.
Also, regardin the logging, does that irule log the client request? Or the request format as sent from F5 to backend?
- P_Kueppers
Okay I never used server-side sni before. Did you tried what AaronJB suggested?
The iRule logs the request form F5 to Backend.
http_request = client to f5 and http_request_release = f5 to backend
