For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

lizunjjg_280139's avatar
lizunjjg_280139
Icon for Nimbostratus rankNimbostratus
Jul 12, 2018

client ssl off_load

hi guys /1. client ssl off_load VIP is on port 443 and pool members also in service port 443 . /2. pool members can not change port (also 443 ) 、、、They want to do ssl offload on the VIP will it wo...
application delivery
BIG-IP
LTM
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jul 12, 2018

If the backend servers are expecting an SSL connection, then you can offload on the bigip with a clientssl profile (with the right cert/key for the domain) and then re-encrypt to the backend pool members by adding a serverssl profile (the default one here will do).

 

Hope this helps,

 

N