For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dan_24306's avatar
Dan_24306
Icon for Nimbostratus rankNimbostratus
Aug 14, 2013

Best practice for HTTP and HTTPS backend

Hello,   My company is trying to implement SSL on one of their legacy web sites. They already had an existing port 80 virtual server configured that would receive the traffic and then send it on t...
design
Torti's avatar
Torti
Icon for Cirrus rankCirrus
Aug 14, 2013

Hi, is it necessarry to run SSL till the backend? If not, I recommend to terminate it at the bigip and use http between bigip and backend. It has a positiv performance impact for your backend server.

But I never heard, that you can run http and https on the same port. Normal setup is 1 VS for http with pool for http traffic and 1 VS for https with pool for https traffic. i.e.

--> (HTTP) bigip:80 (VS1) --> (HTTP) --> backend:80 (Pool1)
--> (HTTPS) bigip:443 (VS2) --> (HTTPS) --> backend:8443 (Pool2)

or

--> (HTTP) bigip:80 (VS1) --> (HTTP) --> backend:80 (Pool1)
--> (HTTPS) bigip:443 (VS2) --> (HTTP) --> backend:8443 (Pool2)

I recommend the second example. It is the best for troubleshooting and network management. But if you need full security (ssl) till the end, it is the first example.