For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MAbbas's avatar
MAbbas
Icon for Cirrus rankCirrus
Sep 25, 2021

client and server side clone pool - https vip

hi all , i want to send all request and response traffic for a https vip to a clone pool . do i need to have 2 vips -- one vip only with client ssl - and send client side decrypted traffic to clone...
application delivery
LTM
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Sep 26, 2021

Hi  Please help me to understand your requirement properly.

 

Do you mean, for some of the traffic on the 443 listening VIP, you want plain traffic for server side connection and rest traffic on the same destination IP/VIP, the server side connection should be encrypted ? Kindly confirm if my understanding is correct?

 

NOTE - If your destination VIP IP and port is same, you can create single VIP only. You won't be able to create another VIP with same IP and port. So if your use case is the same that I have said in first question, then you can achieve same using single VIP only. And the requirement can be fulfilled by having traffic matching conditions using LTM policy or iRule.

  • MAbbas's avatar
    MAbbas
    Icon for Cirrus rankCirrus
    Sep 27, 2021

    this is the question --

    if i have client side ssl - and server side ssl on a VIP - i get encrypted traffic and send encrypted traffic to pool .

    if i want to use clone pool for auditing .

    will the traffic sent to - client cone pool and server clone pool be encrypted on NON encrypted