cancel
Showing results for 
Search instead for 
Did you mean: 
Login & Join the DevCentral Connects Group to watch the Recorded LiveStream (May 12) on Basic iControl Security - show notes included.

1 VIP Handling Multiple Web App Services

bcarreker
Cirrus
Cirrus

I am in the process of migrating many web app services in Azure, behind a pair of F5s. Most of these web apps are behind an internal ASE. Any web app behind the internal ASE will respond to the same IP address. We are using a wildcard SSL cert which will be applied to the majority of them. What we're planning on implementing is:

  • Whichever web apps ends with https://x.x.army.mil; we will attach them to the same VIP, using the same client/server SSL profiles, and a rewrite profile which will rewrite the client URL to the correct server URL.

 

I would like to know is there any downside to this solution? We are using auto SNAT, which I believe allows us 65535 connections to this 1 VIP. Not entirely sure if this is true.

4 REPLIES 4

Hello,

 

I have also configured around 100 web applications behind single F5 VIP and taken it into production and it is working as expected. No issues seen till date.

 

Mayur

​Thank you!

Yes, i have also configured in same manner and not observed any issues.

Angelo_V
Cirrus
Cirrus

Hello,

if you prefer, to increase the maximum connection limit you can use the snat pool.

 

K7820: Overview of SNAT features

 

Angelo V