Forum Discussion

tocotti_331571's avatar
tocotti_331571
Icon for Nimbostratus rankNimbostratus
Aug 28, 2017

Load Balancer to web servers

Hi, I would well balance workload on two different web servers listening on https   Web Server 1 : 2: Web Server 2 : I was thinking to use a Load Balancer that is running on an host A.B.C....
application delivery
BIG-IP
LTM
security
wlopez_98779's avatar
wlopez_98779
Icon for Nimbostratus rankNimbostratus
Aug 28, 2017

You need to use a different IP address for your virtual server. If the two web servers are in the same subnet as the IP address you use for the virtual server you'll need to activate SNAT Automap. If your not doing ssl offloading on the F5 that should be enough. If you are doing ssl offloading you'll need to create a client ssl profile with the certificate and private key for the website. You'll need to activate both the client-ssl profile and a server-ssl profile on your virtual server. You might also want to use an https health monitor for your pool.

 

Hope this helps!

 

  • tocotti_331571's avatar
    tocotti_331571
    Icon for Nimbostratus rankNimbostratus
    Aug 29, 2017

    Hi, Following above suggestions, I have applied these changes:

     

    • WebServer1 is on 10.10.10.56 listening on https 9343
    • WebServer1 is on 10.10.10.58 listening on https 9343

    On linux system hosting the F5 BIG IP, I configured : - a network interface with ip 10.10.10.54 communicating with 10.10.10.56 and 10.10.10.58; - F5 management interface is on IP 1.1.1.54; - Defined Virtual Server , with Destination address 9.A.B.54 , port 443 - https;

     

    with Source addresses 0.0.0.0/0, with Client and Server SSL profiles;

     

    with node members associated to the web servers 10.10.10.56 and 10.10.10.56 (up and running OK);

     

    But if I launch from external client browser : it opens the F5 Management Interface instead of redirect to one of web servers

     

    I see only for less than 1 second a string "redirect" in the middle of browser page, but it returns to the F5 management interface