Forum Discussion

sheikh_316862's avatar
sheikh_316862
Icon for Nimbostratus rankNimbostratus
Aug 02, 2018

Hi Guys ,does virtual ip forwarding support ssl offloading,

I have requirement in which customer is asking me that he want SSl connection type on servers are hosted on internet and source is from lan network. I wont go for SSl offloading.If I would choose the ip forwarding with configure the destionation ip on port 443 how it behaves and If would use only server side encryption from f5 to destination server will it work ?

 

LTM
security
  • Niels_van_Sluis's avatar
    Niels_van_Sluis
    Icon for MVP rankMVP
    Aug 03, 2018

    No, that will not work:

     

    Virtual servers capable of performing SSL decryption/encryption

     

    If you want the BIG-IP system to decrypt and/or encrypt SSL traffic, you must define the following virtual server type:

     

    Standard The standard virtual server is the only virtual server type that can be associated with Client SSL and Server SSL profiles, and perform SSL decryption and/or encryption. If you want the BIG-IP system to decrypt and/or encrypt SSL traffic, you must import the SSL certificates to the BIG-IP system and configure a standard virtual server and appropriate SSL profile.

     

    Source: https://support.f5.com/csp/article/K12015