nerdexam
F5

101 · Question #243

A monitor has been defined with an alias port of 443. All other options are left at their defaults. The administrator wishes to assign it to a pool of members where the members' ports vary. Which is t

The correct answer is B. For each member, the monitor will test member node at port 443. For each member, the monitor. When a BIG-IP health monitor has an alias port configured, it always probes the node at that alias port regardless of the pool member's configured service port.

Section 2: F5 Solutions and Technology

Question

A monitor has been defined with an alias port of 443. All other options are left at their defaults. The administrator wishes to assign it to a pool of members where the members' ports vary. Which is the result?

Options

  • AFor each member, if the member port is not 443, the member will be marked down. For each
  • BFor each member, the monitor will test member node at port 443. For each member, the monitor
  • CFor each member. If it is running an SSL service at the member port, the monitor may work.
  • DThis assignment is not allowed since the port do not match.

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    86% (24)
  • D
    11% (3)

Why each option

When a BIG-IP health monitor has an alias port configured, it always probes the node at that alias port regardless of the pool member's configured service port.

AFor each member, if the member port is not 443, the member will be marked down. For each

A member is not automatically marked down because its configured port differs from the monitor's alias port - the alias port redirects the probe destination, it does not enforce a port-match requirement for member status.

BFor each member, the monitor will test member node at port 443. For each member, the monitorCorrect

The alias port on a BIG-IP monitor overrides the member's service port strictly for health check probe purposes, so the monitor will contact every node at port 443 regardless of what port the pool member is configured to serve on. This allows administrators to verify a specific service (such as HTTPS) on the underlying node IP while traffic is directed to a different member port. Members are marked up or down based solely on the health check result at port 443 on their node address.

CFor each member. If it is running an SSL service at the member port, the monitor may work.

The monitor does not conditionally attempt SSL checks based on whether the member's service port happens to be an SSL port - the alias port of 443 is used unconditionally for every probe regardless of member port.

DThis assignment is not allowed since the port do not match.

BIG-IP explicitly allows assigning a monitor with an alias port to pools whose members use different service ports - the alias port feature is designed to provide this kind of decoupled monitoring flexibility.

Concept tested: F5 BIG-IP health monitor alias port override behavior

Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-local-traffic-management-monitors-reference/monitor-attributes.html

Topics

#health monitors#alias port#pool members#monitor configuration

Community Discussion

No community discussion yet for this question.

Full 101 Practice