# Load Balancing OCSP Responder Pool

**URL:** <https://community.f5.com/t/load-balancing-ocsp-responder-pool/23556>\
**Category:** Technical Forums\
**Tags:** availability, tmos, management, ltm, application-delivery, ocsp\
**Created:** [October 8, 2014, 8:30pm UTC](https://community.f5.com/t/load-balancing-ocsp-responder-pool/23556 "2014-10-08T20:30:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dev\_56330](https://avatars.discourse-cdn.com/v4/letter/d/ba9def/32.png) [@Dev\_56330](https://community.f5.com/u/Dev_56330)\
**Post date:** [October 8, 2014, 8:30pm UTC](https://community.f5.com/t/load-balancing-ocsp-responder-pool/23556/1 "2014-10-08T20:30:40Z")

</div>

I am trying to determine a valid http get command to implement as a health monitor for load balancing 2 Windows 2012 OCSP Responders. I am using fiddler to generate http (get [http://ocspresponder/ocsp/ee/ocsp](http://ocspresponder/ocsp/ee/ocsp)) requests though even when I stop the responder service I still get a 200. The reason I am trying to make this work is that OCSP and CRL will be installed on the same server though the preference is OCSP. In the event OCSP fails, I want the virtual server to fail and then attempt CRL. There are 2 seperate NIC’s (one for OCSP and one for CRL) so I have created 2 different virtual servers which are both listening on 80. Also, I am not using OCSP or CRL profiles as many applications that require certificate validation are not load balanced by the BIG-IP. Any feedback is appreciated. Thank you in advance!

---

<div class="post-metadata">

**Author:** ![David\_Holmes\_9](https://avatars.discourse-cdn.com/v4/letter/d/848f3c/32.png) [@David\_Holmes\_9](https://community.f5.com/u/David_Holmes_9)\
**Post date:** [October 12, 2014, 5:53am UTC](https://community.f5.com/t/load-balancing-ocsp-responder-pool/23556/2 "2014-10-12T05:53:02Z")

</div>

I believe an OCSP GET request has to be real (or real-looking). For example, here is how to build an OCSP request for redhat’s OCSP.

[How to Build OCSP Request - RedHat](https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.0/html/Admin_Guide/OCSPRequests-GETMethod.html)

Hopefully there would be a similar tool for Windows.

You could also capture a real OCSP request from a browser and then replay that as the monitor request.
