Forum Discussion

Dave_22257's avatar
Dave_22257
Icon for Nimbostratus rankNimbostratus
Sep 20, 2010

LTM HTTPS connection on non port 443

I have users connecting to a web server on either HTTP or HTTPS as the initial connection via my F5 LTM. Within this web page, there is another link that when click it attempts to open up a HTTPS session on port 8443.

 

I am unable to get this working through my F5 LTM.

 

 

My setup simply includes a Virtual Server using a HTTP2HTTPS profile with a service port of 8443, pointing at a default resource pool which includes the single IP address of the real web server IP address.

 

 

When i connect directly to the web server (bypass the F5) i can open the HTTPS session on port 8443 successfully. This indicates that something is either misconfigured in the F5 or this type of connection is unsupported bu the F5.

 

 

I am completely lost. Any assistance is appreciated !

 

 

 

 

config
design

3 Replies

Sort By
  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Sep 20, 2010
    What do you mean by "http2https profile?"

     

     

    Your Virtual Server should be listening on 8443 and if you're terminating the SSL connection, you should have a client_ssl profile too. Is this the case?
  • Dave_22257's avatar
    Dave_22257
    Icon for Nimbostratus rankNimbostratus
    Sep 20, 2010
    Sorry I just realized that my HTTP2HTTPS is a custom HTTP profile I have selected for use by the VIP, its simply a modified HTTP profile which has the Redirect ReWrite checked and set to ALL.

     

     

    Yes, my VIP is listening on port 8443 (I presume you are referring to the service port), and yes I do have a client_ssl profile defined and does work. If the initial request is on HTTPS/443, the certificate is loaded accordingly and the connection is established accordingly. Its only when I click on the link (HTTPS:8443) within this web page that is causing me the issue, I still get prompted for the certificate.
  • Dave_22257's avatar
    Dave_22257
    Icon for Nimbostratus rankNimbostratus
    Sep 20, 2010
    Simple solution in the end. needed to enable serverside SSL profile.