An existing Layer 7 Virtual Service is terminating SSL/TLS with WAF enabled. How would an administrator add support for SMTP on the same FQDN and Virtual IP?
Avi Load Balancer supports sharing a single VIP across multiple Virtual Services when the Virtual Services use different listener ports. This is the correct design when different application protocols must be served on the same IP address but require different profiles, pools, and processing behavior. An existing Layer 7 HTTPS Virtual Service with SSL termination and WAF should not be converted into a mixed L7/L4 object for SMTP. SMTP should use its own Virtual Service with an appropriate Layer 4 profile and backend SMTP pool. Broadcom documentation specifically states that a single VIP can be shared across multiple Virtual Services by choosing different ports for each Virtual Service. Therefore, the correct approach is to create a second Virtual Service reusing the same VIP, with separate SMTP listener ports, L4 profile, and SMTP pool.
Currently there are no comments in this discussion, be the first to comment!