For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Randy_Abrams's avatar
Randy_Abrams
Icon for Nimbostratus rankNimbostratus
Sep 27, 2012

Encrypt HSL traffic

Are there any methods to encrypt High Speed Logging (HSL) traffic sent to a remote host? An SSH tunnel from the BIG-IP doesn't seem possible since the management GUI disallows a pool member assigned to a self-ip address.

 

management
monitoring

3 Replies

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Sep 27, 2012
    There's no built-in HSL encryption supported but you could use an iRule to encrypt the log data and something on the server side to decrypt it (although I've no idea what).
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Oct 02, 2012
    It's a bit roundabout, but...

     

     

    You could target a pool containing the IP:port of a virtual server. On that VS, you could configure a server SSL profile and a pool containing a syslog server IP:port that accepts SSL encrypted syslog.

     

     

    Aaron