Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

CSS multiple domain names with one VIP !!

Dear All,

I Have CSS 11503 with SSL module, the question is :

Can i have 5 domain names i.e.

mydomainname1.com

mydomainname2.com

mydomainname3.com

mydomainname4.com

mydomainname5.com

all pointing to the same VIP ? or 5 different VIP has to be there ?? and also just to confirm i would need to generate 5 certificates ?

please advice !!

thanks,

Hasan Odeh

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: CSS multiple domain names with one VIP !!

Hasan,

this is recurrent question.

The answer is : you need multiple vip.

The reason is because to see the domain name you need to first decrypt the ssl application data to see the http request.

To decrypt the ssl data, you need to know which certificate to use.

The certificate is linked to a domain name.

So you need to know the domain name before you can decrypt.

The only way to do this, is to assign a different vip to each domain.

Gilles.

3 REPLIES
Cisco Employee

Re: CSS multiple domain names with one VIP !!

Hasan,

this is recurrent question.

The answer is : you need multiple vip.

The reason is because to see the domain name you need to first decrypt the ssl application data to see the http request.

To decrypt the ssl data, you need to know which certificate to use.

The certificate is linked to a domain name.

So you need to know the domain name before you can decrypt.

The only way to do this, is to assign a different vip to each domain.

Gilles.

New Member

Re: CSS multiple domain names with one VIP !!

Thanks Gilles,

That was exactly the answer im looking for ...

if i create 5 VIP IP address but actually all those 5 VIP will be pointing to 2 servers with virtual host (im having an IBM WebSphere http service)...

Is there any special configurations i need to take under my consideration with the application team !

best regards,

Cisco Employee

Re: CSS multiple domain names with one VIP !!

Hassan,

nothing special to do on the server side.

If it works in plain htttp, it will work with the CSS terminating SSL connections.

Gilles

168
Views
0
Helpful
3
Replies
CreatePlease to create content