For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

riraccuia's avatar
riraccuia
Icon for Cirrus rankCirrus
May 04, 2016

Client SSL and SOCKS profiles on same VS

Hello Devcentral,

I have a VS that's configured as follows

ltm virtual myVS {
    destination 10.0.0.1:443
    ip-protocol tcp
    mask 255.255.255.255
    profiles {
        clientssl {
            context clientside
        }
        socks { }
        tcp { }
    }
    source 0.0.0.0/0
    source-address-translation {
        type automap
    }
    vs-index 69
}

The client uses stunnel to establish a TLS session with 10.0.0.1 and then basically sends SOCKS requests into the tunnel. This is accomplished by configuring 127.0.0.1:8080 as SOCKS proxy in the browser settings.

Stunnel Configuration:

[sockstest]
client = yes
accept = 127.0.0.1:8080
connect = 10.0.0.1:443
verify = 0

This configuration doesn't work: the browser fails to load any websites.

But if i just remove the Client SSL profile from myVS and use 10.0.0.1:443 as SOCKS proxy, the browser successfully loads any web pages.

Why is that ?

No RepliesBe the first to reply