Forum Discussion

robert5156_7838's avatar
robert5156_7838
Icon for Nimbostratus rankNimbostratus
Oct 18, 2010

Big-IP configuration with Intrusion Detection device for ssl traffic

Our currenct infrastructure we have load balancing based on IP.     For https traffic the Virtual IP on Big-IP is load balancing based on IP. The individual members (servers) in the pool have se...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Oct 18, 2010
Hi Robert,

 

 

Decrypting the SSL on LTM is a very common practice. LTM is generally going to be more efficient than the servers at this. And it simplifies the cert administration. And it allows you to easily use an IPS to inspect the decrypted HTTP off a single port. So I'd say it's a good solution that you've arrived at.

 

 

Aaron