Kemp Support, how can we help?

The latest application delivery knowledge and expertise at your fingertips.

Unable to set extra ports for SSL Reencrypted VIPs

 

Information

 

Summary:

Extra ports for Virtual Services with SSL Acceleration

Environment:

Product: LoadMaster.

Version: Any.

Platform: Any.

Application: Any.

Question/Problem Description:

Is there a limitation that reencrypt and add extra ports cannot be added in parallel? When the service is set to reencrypt and the option for extra ports is not visible anymore or if the extra port is added the reencrypt-option is greyed out.

Steps to Reproduce:  
Error Message:  
Defect Number:  
Enhancement Number:  
Cause:

With re-encryption you cannot have transparency because there is no way for the information about the source IP address to be passed through the re-encryption engine. For similar reasons, this also applies to additional ports, hence the block / interlock.

Resolution: Unfortunately, you cannot use Extra Ports when doing SSL reencryption. If you need additional ports, you'll need to create an additional service and use the needed extra port there.
Workaround: The only workaround is to create a separate VIP for the other port.
Notes:  

Comments