I'm setting up load-balanced service requiring stunnel with SSL on its front end. There are two hosts behind load balancer running stunnel . Service behind stunnel does not speak SSL. Every few minutes load balancer checks if
...
If you send me the stunnel configuration as well as the relevant bigip.conf sections I can probably figure it out.
Is there any way to make stunnel without "client = yes" close connection "normal way" with FIN instead of RST ?
That's not Stunnel, it's the OS (linux/etc). Stunnel doesn't have an entire TCP/IP stack built into it, it relies on the OS handling all that for it. It uses "accept/bind/close/connect" system calls, and that's all it needs.
stunnel is last version, load balancer is some older F5 BigIP
Which version, specifically?