For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Thomas_Schaefer's avatar
Thomas_Schaefer
Icon for Nimbostratus rankNimbostratus
Sep 24, 2009

Best Practice to let server know connection was SSL

After working with the BigIP for several years, I feel silly asking this question, but when one uses SSL acceleration and sends data to the pool members in the clear, how does the backup application k...
application delivery
dev
devops
iRules
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Jan 21, 2010
Normally I add in the certificate information to an HTTPS offloaded stream too. Various 3rd party apps also support the concept of SSL offload. e.g. Oracle Access Manager (OAM) & Tivoli Access Manager (TAM). They expect certain headers to indicate that the SSL was offloaded and so generate the correct URL's.

 

 

I also tend not to share the same poolmembers between offloaded (HTTPS) and non-offloaded (HTTP) VS's... Just another belt & braces approach to security... (And I don't use match across pools for persistence either).