Forum Discussion
VIP listening on port 80 (http), and F5 to pool members is https
VIP listening on port 80 (http) from client, however pool members meant to communicate https (port 8202) with F5 and its not working. I have configured SSL profile on server side in Virtual server. I can see TCP rst packet from VIP to client. Unable to see F5 is converting http traffic to https. I have even tried sslserver profile without certificate and key, still didnt work. Could someone advise how to capture or troubleshoot the issue ?
Can you check that 'Port Translation' is enabled in the virtual server?
- Kevin_Davies_40
Nacreous
If you click on Local traffic -> Network Map, do you see your virtual server and pool members have green dots next to them or do they have another color/shape.
- m1978_295079
Nimbostratus
They are all green ( Vs and pool members)
- Kevin_Davies_40
Nacreous
Ok that's good then. You need a serverssl profile, you do not need any keys and or certs for this. Just the default serverssl profile should do. If that fails try the serverssl-insecure profile instead.
Can you give me a tmsh list ltm virtual and paste it here. When you paste it, select what you pasted and then hit TAB. This will indent the text and make it appear as a code block. This works in Chrome/Firefox browsers, not sure about Edge/IE.
- Prince
Altostratus
Perform a openssl connection test to pool members and see if connection is successful :
openssl s_client -connect example.com:8202
Perform a packet capture on F5 while initiating the connection and see if any backend connections getting established.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com