Forum Discussion

steven_normole's avatar
Nov 03, 2023
Solved

Server Profile SNI

I have enabled server name on the server ssl profile and client ssl profile.  

Question is:  should I see in the client hello packet from the F5 to the backend server the SNI server name?  In the user client hello to the virtual server I do see  SNI server name in the hello packet.

The backend application owner has setup containers/pods and they are not getting the SNI so they can determine which pod is to receive the traffic.

  • i solved the issue, needed to enable it

    tmsh modify ltm virtual <virtual server> serverssl-use-sni enabled