Modifying LTM hostname
Will changing my device hostname with command: "tmsh modify /sys global-settings hostname [hostname]" ..affect anything on my box such as device certificates or HA connection? Can I freely change my hostname without any consequence? The device name that is being used for HA is already the desired hostname so that does not need changed. I'm only referring to my hostname if this makes sense.
Possibility of the Dynamic hostname in the SNI field?
Hello Guys, Can somebody please help me to know if I can have a dynamic host address in the serverssl profile with which I can enable the SNI on it. SO in short I have a requirement in which the hostname will be changing (****.example.com) all the time but it needs to be there in the SNI field. As far as I know, we can have a static entry in its filed so not sure if the dynamic can be placed in it or not. Really appreciate your time and help. Thanks and regards, R
Redirect Options for retired hostname using SSL
So, I am trying to tackle an interesting problem. I have a legacy domain with a certificate that I am trying to retire. I have a new domain, new hostname, new certificate, and separate Virtual Server setup. However, I have no control over users on the Internet with saved links. The URLs referencing this hostname on the legacy domain, have long since been removed from publication. Just looking today, there were still more than 100 active connections. I can perform a redirect, assuming I can un-encrypt the traffic. However, I have a need to retire the associated certificate. hostname.olddomain.com = VS-1:443 hostname.newdomain.com = VS-2:443 Is there any way to process traffic on port 443 without performing a certificate exchange, so that the user will send their request in a way that I can redirect them without having to un-encrypt the traffic? Would it be possible to use NAT in some fashion to force the user to a Virtual Server listening on port 80, or will that break due to the https:// in the URL? I fear that there is no way to solve this problem and I am forced to renew this certificate for another year.