Forum Discussion

Quintious_74258's avatar
Quintious_74258
Icon for Nimbostratus rankNimbostratus
Nov 17, 2011

Encrypting HTTP traffic to SSL on LTM

We're about to leverage our LTM's for a partnership, and need to know how to take unencrypted traffic and encrypt it.     Basically what we're doing is:     -Traffic will come in from our ...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Nov 17, 2011
Hi,

 

 

For the partner (HTTPS) -> LTM -> (HTTP) app traffic you can create a virtual server on port 443 with a client SSL profile pointing to a pool of the server(s) on port 4000. The replies will follow the reverse path. If your server(s) have their default gateway set to the LTM floating self IP, you don't need SNAT. If that's not the case, then use SNAT on the virtual server.

 

 

For the app (HTTP) -> LTM -> (HTTPS) partner traffic, you can create an HTTP virtual server with a server SSL profile pointing to a pool of the partner server(s) on port 443. You'll need to use SNAT on this virtual server. You'll also need a TMM route (or default route) to get to the partner network.

 

 

Aaron