Product Documentation

Binding Services to the SSL-Based Virtual Server

Aug 20, 2013

For the NetScaler appliance to forward decrypted SSL data to servers in the network, services representing these physical servers must be bound to the virtual server that receives the SSL data.

Because the link between the NetScaler and the physical server is typically secure, data transfer between the appliance and the physical server does not have to be encrypted. However, you can provide end-to end-encryption by encrypting data transfer between the NetScaler and the server. For details, see Configuring SSL Offloading with End-to-End Encryption.

Note: The Load Balancing feature should be enabled on the NetScaler appliance before you bind services to the SSL based virtual server.

To bind a service to a virtual server by using the command line interface

At the command prompt, type the following commands to bind the service to the virtual server and verify the configuration:

  • bind lb vserver <name> <serviceName>
  • show lb vserver <name>

Example

 
> bind lb vserver vssl ssl1 
 Done 
> show lb vserver vssl 
        vssl (10.102.29.133:443) - SSL  Type: ADDRESS 
        State: DOWN[Certkey not bound] 
        Last state change was at Thu Nov 12 05:31:17 2009 (+485 ms) 
        Time since last state change: 0 days, 00:08:52.130 
        Effective State: DOWN 
        Client Idle Timeout: 180 sec 
        Down state flush: ENABLED 
        Disable Primary Vserver On Down : DISABLED 
        No. of Bound Services :  1 (Total)       1 (Active) 
        Configured Method: LEASTCONNECTION 
        Mode: IP 
        Persistence: NONE 
        Vserver IP and Port insertion: OFF 
        Push: DISABLED  Push VServer: 
        Push Multi Clients: NO 
        Push Label Rule: none 
 
1) ssl1 (10.102.29.252: 80) - HTTP State: UP    Weight: 1 
 Done   

To unbind a service from a virtual server by using the command line interface

At the command prompt, type the following command:

unbind lb vserver <name> <serviceName>

Example

unbind lb vserver vssl ssl1

To bind a service to a virtual server by using the configuration utility

  1. Navigate to Traffic Management > Load Balancing > Virtual Servers.
  2. Open a virtual server, and click in the Services section to bind a service to the virtual server.