For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Krys_Frankiewic's avatar
Krys_Frankiewic
Icon for Nimbostratus rankNimbostratus
Nov 05, 2015

TCP port translation problem

We are terminating SSL right on the server (node) which is listening on TCP 9443. Our VS is listening on 443, HTTP profile is set to none and port translation is enable. In this scenario we are not a...
application delivery
LTM
Krys_Frankiewic's avatar
Krys_Frankiewic
Icon for Nimbostratus rankNimbostratus
Nov 05, 2015

I know that this scenario will works, we have many SSL termination on F5. Request from the client is not to install on F5, only on the servers. That kaind scenario also works as long we don't do any port translation. Unfortunately server can't listen on 443, only on 9443.

 

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Nov 05, 2015
    so this is the same configuration but without clientssl and serverssl profiles. the server replies must not include service port.
  • Renato_166638's avatar
    Renato_166638
    Icon for Nimbostratus rankNimbostratus
    Nov 05, 2015
    The VS in your case should work the same way like any other HTTP or SSL terminated. You just have to set the correct ports on nodes and VS configuration and configure it to use L4/TCP profile. Don't use all ports and set the same SNAT option that is working with the other VSs you already have.