Forum Discussion

Gary_Meehan_315's avatar
Gary_Meehan_315
Icon for Nimbostratus rankNimbostratus
May 14, 2012

Big-IP LTM Re-encryption

Hi all,     I've using the virtual edition of Big-IP 10.1 under a trial license, which I'm using to load balance traffic to a web server (a single instance of IIS in my test case).     In ...
basic
getting started
new to f5
John_Matlock_42's avatar
John_Matlock_42
Icon for Nimbostratus rankNimbostratus
May 15, 2012
Gary,

 

 

Here is the config information for the serverssl-insecure-compatible SSL profile... I was under the impression it was a default, but I guess I could be wrong. I don't think it'll change the behavior you're seeing, I'm just curious. Btw, have you had a chance to perform some tcpdumps to see if there's anything obvious like retransmissions, sequence issues or resets?

 

 

ltm profile server-ssl serverssl-insecure-compatible {

 

ciphers !SSLv2:!EXPORT:!DH:RSA+RC4:RSA+AES:RSA+DES:RSA+3DES:@SPEED

 

defaults-from serverssl

 

secure-renegotiation request

 

}

 

 

John