Forum Discussion

immu's avatar
immu
Icon for Altostratus rankAltostratus
Aug 07, 2017

VS configuration

Can any one help me as to how can I configure a VS with the backend server and port.

 

also I need to do port redirection form 80 to 443

 

  • Hi,

     

    1. Create a node or nodes. Local Traffic -> Nodes -> Node List -> Create.
    2. Create a pool. Local Traffic -> Poold -> Pool List -> Create.
    3. Add nodes to the pool on Service Port 443.
    4. Add a monitor to the pool.
    5. Create a Standard Virtual Server. Local Traffic -> Virtual Servers -> Virtual Server List -> Create.
    6. Select HTTP as the Service Port.
    7. Add a HTTP profile to the Virtual Server.
    8. Add a SSL Profile (Server) to the Virtual Server. For testing this can be serverssl-insecure-compatible.
    9. Add the Default Pool from step 2.

    When creating the pool, you can select a load balancing method. You can also configure some persistency.

     

    But the above steps should do the trick.

     

    Good luck.

     

    Martijn

     

  • Hi,

     

    In addition to above and to your redirection query.

     

    1. Create two VS with same Name and IPs but use port 443 and 80
    2. 443 will have all the configurations , Persistance ,Pool, Pool Members etc.
    3. In 80 VS add an iRule to redirect the connection to 443 VS

    You can use the simple one:

     

    when HTTP_REQUEST {

     

    HTTP::redirect "https://[HTTP::host][HTTP::uri]"

     

    }

     

    Regards,

     

    Aditya

     

  • Hi,

     

    In addition to above and to your redirection query.

     

    1. Create two VS with same Name and IPs but use port 443 and 80
    2. 443 will have all the configurations , Persistance ,Pool, Pool Members etc.
    3. In 80 VS add an iRule to redirect the connection to 443 VS

    You can use the simple one:

     

    when HTTP_REQUEST {

     

    HTTP::redirect "https://[HTTP::host][HTTP::uri]"

     

    }

     

    Regards,

     

    Aditya

     

    • MvdG's avatar
      MvdG
      Icon for Cirrus rankCirrus

      Missed the part of the redirection.

       

      Aditya is right. Create a second VS on port 443 and add an iRule on the port 80 VS for the redirection to port 443. This is a default iRule within the LTM iRule list: _sys_https_redirect

       

      Do not forget to add a SSL Profile (Client) on the port 443 VS. For testing this can be clientssl-insecure-compatible.

       

    • immu's avatar
      immu
      Icon for Altostratus rankAltostratus

      Martin and Aditya really appreciate the response given by both of you...as I have 25 number of VIP's to be created can I get the cli procedure to do the above task..

       

      Thanks Immu

       

    • Aditya_Mehra's avatar
      Aditya_Mehra
      Icon for Cirrus rankCirrus

      Hi Immu,

      It depends on the settings of the Virtual Server and Pools. You should refer to the Traffic Management Shell (tmsh) Reference Guide for your version.

      For example this is for 11.5.0 : Guide

      The command to create basic VS,Pool and Nodes will be the below:

      tmsh create ltm node  address 
      tmsh create ltm pool  members add { : }
      tmsh create ltm virtual  destination : pool 
      

      But there are many more parameters which you will need to add; those you can check in the Traffic Management Shell (tmsh) Reference Guide for your version.

      Regards,

      Aditya