Attempting to configure SNI enabled HTTP monitors. We have SNI enabled on AAA/GW, certs bound as SNI. These also happen to be GSLB GWs. With no monitor bound to the GSLB GW service, SNI works fine. Enabling customers existing GSLB service monitor shows the site down. Remove it, it comes back up. Found we would need to enable SNI in a backend SSL profile that is bound to the GSLB monitor. However that results in Time out during SSL handshake stage. I may need to set a customer header now, based on this? https://docs.netscaler.com/en-us/citrix-adc/current-release/ssl/config-ssloffloading.html#configure-and-bind-a-secure[…]end-service-by-using-the-gui Does this seem like the proper path? Enable SNi in SSL backend profile with the common name of one of the bound SSL certs, and modify/create new monitor that checks the host header via a custom header monitor. Anyone have any gotchas with this?

You need both, the backend SSL profile (unique for each hostname) and in the monitor you need to configure the hostname in the request. I thing I have an example in one env. If you don’t get it resolved by tomorrow, I can check my setup ✌️

1. create a backend SSL profile with SNI enabled and my main hostname configured as common name. 2. link this profile to the monitor. 3. Modify monitor to include custom header using the same common name as the 1. above.

sounds similar to what I did

That did it! Thanks