Forum Discussion

Mayank_Shukla's avatar
Mayank_Shukla
Icon for Altostratus rankAltostratus
May 18, 2019

https monitors

Hi

If we use/set client certificate and key under https health monitor advanced configuration setting and apply that monitor to a pool on a LTM

then we can perform curl test to the pool member via that LTM only and if we try to do so via any other system in the network then

curl command will not work for that particular member i.e. only that particular LTM can send probe request to the pool member. Is this interpretation right ?

 

Thanks

Mayank

4 Replies

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus

    I'll admit, I don't follow your logic here.

     

    Why would you think that only the LTM can send probe requests? I think you're missing out some details if you think do.

     

    I could assume that your mean that you need a client cert to talk to the pool member, and nobody else has a client cert... but you don't state that in your setup, so based on the information you do supply I would disagree with your conclusion.

    • Mayank_Shukla's avatar
      Mayank_Shukla
      Icon for Altostratus rankAltostratus

      in simple words, in what scenario we set client certificate and key options under https health monitor advanced setting ? please explain..

  • Hi Mayank,

     

    This is used when your webserver or IIS has any kindly certificate authentication or authorisation set for successfull probing .

     

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus

    Yeah. You'd set a client cert if your backend required it. TBH I can't think of another reason for it...