Forum Discussion

Ken_B_50116's avatar
Ken_B_50116
Icon for Cirrostratus rankCirrostratus
Feb 16, 2017

Load balancing LDAPS without offloading the SSL

LTM 11.5.4.

 

Is it possible to load balance LDAPS with LTM without offloading the SSL? I just want to pass the encrypted 636 traffic back to the domain controllers. The iApp does not offer this option and I cannot make it work by manually configuring it, even though my pool and virtual server are green, and the health LDAP monitor has "SSL" checked.

 

3 Replies

  • Hi, do you have any SSL/HTTP profiles configured on the VS

     

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus

    You can create a virtual server with just a tcp profile applied and configure the pool with LB method of "Least Connections (member)".

     

  • it might sound unkind but how is your BIG-IP knowledge? do you configure virtual servers all the time or only once or twice via an iApp?

     

    in general this must work, but if it doesn't it becomes complicated to determine where to start troubleshooting without an idea of your experience.

     

    to start with, do your statistics counters go up on the virtualserver, pool, poolmembers?