Forum Discussion

stucky101_88485's avatar
stucky101_88485
Icon for Nimbostratus rankNimbostratus
Aug 10, 2012

Cannot create iApps that run over http and https on same VIP

Gurus

 

 

I have an app that runs over http and partly over https. Up until now I would create 2 VS on the same IP.

 

One for http on 80 and one for https on 443 which works cause the port is different.

 

 

It's unclear to me how this translates into the iApp concept. Logically there is only one app spread over 2 VS. The first problem is naming :

 

 

* I can only create one iApp over either http or https, after that I have to pick another iApp name or else it complains that objects with this prefix already exists.

 

 

*When I pick a different name, however, it still complains that :

 

 

"01070333:3: Virtual Server /Common/vs1 illegally shares both address and vlan with Virtual Server /Common/vs2"

 

 

This means I cannot use the iApp template at all. Both http and https have to listen on the same IP and allow the same VLAN. This works when you do it manually.

 

 

This opens up an interesting question. What exactly distinguishes an "iApp" ? Is it per IP or per virtual server ?

 

It looks like there is no concept of having the same app use 2 different VS. How can I tell the f5 how to distinguish my apps ?

 

F.e. I have one setup where there is only one single VIP and all apps are separated only by URI. I have iRules that take care of that like :

 

 

if { [HTTP::host] equals "/app1" } {

 

pool app1

 

}

 

elseif { [HTTP::host] equals "/app2" } {

 

pool app2

 

 

and so forth.

 

 

I assume there is no way to tell the LTM to make these into separate iApps right ?

 

I was ok with switching back to having dedicated IPs per app but now I cannot even seem to do that.

 

 

Am I out of luck ?