For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Krys_Frankiewic's avatar
Krys_Frankiewic
Icon for Nimbostratus rankNimbostratus
Nov 05, 2015

TCP port translation problem

We are terminating SSL right on the server (node) which is listening on TCP 9443. Our VS is listening on 443, HTTP profile is set to none and port translation is enable. In this scenario we are not a...
application delivery
LTM
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Nov 05, 2015

if you configure SSL terminaison on F5, there is no need to install a valid certificate on server.

 

you must create:

 

  • pool with members on port 9443
  • VS on port 443
    • client SSL profile with valid certificate
    • server SSL profile
    • Pool previously defined
    • SNAT if needed

after that, try to connect with firefox and firebug enabled and check if server reply with port 9443 in redirect of html links.