Forum Discussion

m1978_295079's avatar
m1978_295079
Icon for Nimbostratus rankNimbostratus
May 01, 2017

VIP listening on port 80 (http), and F5 to pool members is https

VIP listening on port 80 (http) from client, however pool members meant to communicate https (port 8202) with F5 and its not working. I have configured SSL profile on server side in Virtual server. I can see TCP rst packet from VIP to client. Unable to see F5 is converting http traffic to https. I have even tried sslserver profile without certificate and key, still didnt work. Could someone advise how to capture or troubleshoot the issue ?

 

  • If you click on Local traffic -> Network Map, do you see your virtual server and pool members have green dots next to them or do they have another color/shape.

     

    • Kevin_Davies_40's avatar
      Kevin_Davies_40
      Icon for Nacreous rankNacreous

      Ok that's good then. You need a serverssl profile, you do not need any keys and or certs for this. Just the default serverssl profile should do. If that fails try the serverssl-insecure profile instead.

       

      Can you give me a tmsh list ltm virtual and paste it here. When you paste it, select what you pasted and then hit TAB. This will indent the text and make it appear as a code block. This works in Chrome/Firefox browsers, not sure about Edge/IE.

       

  • Perform a openssl connection test to pool members and see if connection is successful :

     

    openssl s_client -connect example.com:8202

     

    Perform a packet capture on F5 while initiating the connection and see if any backend connections getting established.