Support for SNI Extension in TLS Handshakes to Pool Servers

This section discusses the TLS SNI support for connections to pool servers.

Selection of the SSL to Backend Servers check box causes a set of fields to appear, among them the Enable TLS SNI option, which is selected by default. Selecting the check box enables TLS SNI for connections to servers, and the SNI extension is sent as part of the handshake.

Optionally, one may furnish a fully qualified DNS hostname to be used in the TLS SNI extension in server connections. If no value is specified (the default), NSX Advanced Load Balancer will use the pool name (value of the incoming request’s Host Header) instead.