Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

F5 with SSL/TLS for JDBC queries (Apache Hive and Impala)

ndupont_382983
Nimbostratus
Nimbostratus

Hi all,

 

We are using F5 to load balance some Hadoop DB services (apache Hive and apache Impala) : if it's perfectly working unencrypted, we have a problem setting SSL offload (encryption between client and LB only) for JDBC queries (not HTTP). Below are the main diff between configurations

 

Unencrypted settings

 

  • Type : Performance (Layer 4)
  • Protocol Profile (Client) : fastL4_1h_idle_timeout
  • SSL Profile (Client) : none
  • SSL Profile (Server) : none
  • Default Persistance Profile : SrcAddr
  • F5 Port : 10000
  • Target port : 10000

Encrypted settings

 

  • Type : Standard (Performance Layer 4 can't be used with SSL/TLS)
  • Protocol Profile (Client) : proto_all
  • SSL Profile (Client) : /commonCompany
  • SSL Profile (Server) : none
  • Default Persistance Profile : SrcAddr
  • F5 Port : 10443
  • Target port : 10000

When connecting to the secured entry point, the behavior is quite unpredictable : sometimes it'll connect, sometimes the connection will hang while being established ending with a connection time-out error

 

Any hints ?

 

2 REPLIES 2

ndupont_382983
Nimbostratus
Nimbostratus

Problem solved with the following actions - Protocol Profile (Client) : switched to TCP with 1H idle timeout - Oneconnect profile : was set by mistake, switched to none

 

-> This last setting was the root cause of the problem, oneconnect use for non-HTTP traffic should be avoided

 

@ndupont 382983

 

Hello

 

Can you share what are the monitor type you configured ? If possible can you share the monitor details ?

 

Service port 10443 you used as HTTPS ?

 

Are you using SSL Bridging or Offload ?

 

If SSL Bridging do I need to install the cert at backend DataBase Server too ?