Forum Discussion

Tom_Cole_-_Care's avatar
Tom_Cole_-_Care
Icon for Nimbostratus rankNimbostratus
Jan 02, 2015
Solved

Force iControl (not iControl.REST) to use HTTPS

Is there a way to force iControl to use an https connection?

 

BIG-IP DNS
devops
iControl
management
security
  • Brent_West_7733's avatar
    Brent_West_7733
    Jan 02, 2015

    iControl uses SOAP over HTTPS. When you instantiate a connection to BigIP, you must use either the management IP or a SelfIP on port 443. Your SOAP connection must be established with an open socket to the iControl API, and because the BigIP doesn't accept plaintext connections (it only listens on port 443 with an SSL certificate), all iControl communications occur through SSL.

     

    Is there a specific issue that you are having that is driving your question?

     

5 Replies

Sort By
  • shaggy's avatar
    shaggy
    Icon for Nimbostratus rankNimbostratus
    Jan 02, 2015
    can you elaborate? when connecting to an F5 device via iControl, it does use an https connection
  • Brent_West_7733's avatar
    Brent_West_7733
    Historic F5 Account
    Jan 02, 2015

    The BigIP doesn't respond to port 80 by default. Both iControl (and iControlREST) use HTTPS.

     

  • Brent_West_7733's avatar
    Brent_West_7733
    Historic F5 Account
    Jan 02, 2015

    iControl uses SOAP over HTTPS. When you instantiate a connection to BigIP, you must use either the management IP or a SelfIP on port 443. Your SOAP connection must be established with an open socket to the iControl API, and because the BigIP doesn't accept plaintext connections (it only listens on port 443 with an SSL certificate), all iControl communications occur through SSL.

     

    Is there a specific issue that you are having that is driving your question?