Forum Discussion

f5beginner's avatar
f5beginner
Icon for Cirrostratus rankCirrostratus
Jul 29, 2019
Solved

Different port from client to F5 as from F5 to server

Hi,

 

I need to set up different port from client to F5 as from F5 to server.

 

Scenario:

 

Virtual Server IP: 1.1.1.1 with port 9035

Node A IP: 10.1.1.1 with port 8050

 

Client will go to this url https://1.1.1.1:9035 and F5 should change port to 8050 to reach Node A.

 

Do you have any Idea how to solve it ?

 

Thank you

 

application delivery
BIG-IP
iRules
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Jul 29, 2019

    Same answer...

     

    either you don’t enable any of http and ssl profiles on the virtual server, either you enable all of following:

    • client ssl profile
    • http profile
    • serverssl profile

     

    if you enable only http profile, it will fail

6 Replies

Sort By
  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Jul 30, 2019

    Perhaps you would like to describe "does not work" further? What are the symptoms? Any error messages?

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jul 29, 2019

    Very very difficult scenario 😉

     

    create the virtual server listening on port 9035...

     

    create the pool with member on port 8050.

     

    this is the only configuration to do (except if the backend server returns pages including absolute urls in links, image and css urls)

  • f5beginner's avatar
    f5beginner
    Icon for Cirrostratus rankCirrostratus
    Jul 29, 2019

    Hi Stanislas,

     

    yes it is easy, but it does not work. Maybe I did not mention, that traffic shoudl be SSL (HTTPS) on port 9035 same as 8050.

     

    Thanks

    • Stanislas_Piro2's avatar
      Stanislas_Piro2
      Icon for Cumulonimbus rankCumulonimbus
      Jul 29, 2019

      Same answer...

       

      either you don’t enable any of http and ssl profiles on the virtual server, either you enable all of following:

      • client ssl profile
      • http profile
      • serverssl profile

       

      if you enable only http profile, it will fail

  • f5beginner's avatar
    f5beginner
    Icon for Cirrostratus rankCirrostratus
    Jul 30, 2019

    Hi, unfortunately same issue, still does not work, everything was setted up as you wrote above, but still same.

  • f5beginner's avatar
    f5beginner
    Icon for Cirrostratus rankCirrostratus
    Jul 30, 2019

    Hi All, I found a issue. Problem was that traffic from F5 was encrypted and traffic from cisco asa shouldn´t be encrypted. So I only delete serverssl certificate and now it works. Thanks for help