For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Anurag_384242's avatar
Anurag_384242
Icon for Nimbostratus rankNimbostratus
Feb 20, 2019

F5 LB : Decryption and Re-Encryption of Traffic to Application Server

I want to understand how a F5 Load balancer decrypts the SSL traffic received from a client say a browser and then re-encrypts it before sending/forwarding the same to an Application Server in an ent...
BIG-IP
BIG-IP DNS
security
Stephane_Viau's avatar
Stephane_Viau
Icon for Nimbostratus rankNimbostratus
Feb 20, 2019

There are multiple ways to do that on the Big-IP, but in most cases you probably want the valid certificate and its matching private key on the Big-IP, and then you can have a valid or self-signed certificate and its matching private key on the backend server.

 

Encryption between the client and the Big-IP will use the certificate hosted on the Big-IP, and encryption between the Big-IP and the backend server will be done using the certificate on the backend server. In this scenario the Big-IP acts both as a server and a client.