Forum Discussion

Piyush_72418's avatar
Piyush_72418
Icon for Nimbostratus rankNimbostratus
Jan 06, 2010

persistence across two VIPs having 2 diff. pools and bypass SSL to node members

Hi,     I have 2 VIPs     1. vip_abc_http having pool abc_http_pool   2. vip_abc_https having pool abc_https_pool     now pool abc_http_pool has members like ...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Jan 06, 2010
If you're not decrypting the SSL for the HTTPS VIP, you can't inspect or modify the HTTP content for that VIP. As only one VIP is using SSL, you couldn't use SSL session ID persistence for both VIPs.

 

 

You could create a custom source address persistence profile with "match across services" enabled and add that to both VIPs. If the virtual servers are not defined on the same IP address, you would also need to add "match across virtuals".

 

 

See SOL5837 for details:

 

 

SOL5837: Match Across options for session persistence

 

https://support.f5.com/kb/en-us/solutions/public/5000/800/sol5837.html

 

 

Aaron