Forum Discussion

abi1980_184094's avatar
abi1980_184094
Icon for Nimbostratus rankNimbostratus
Apr 24, 2015

hi

i am using a wildcard VIP to loadbalance 433 , 5222 and 5223 connections   I will using a VIP with a standard :L7 profile . Is it possible to perform SSL briding using an L7 profile for my 443 co...
Hannes_Rapp_162's avatar
Hannes_Rapp_162
Icon for Nacreous rankNacreous
Apr 24, 2015

You can't access L7 information in F5 with SSL bridging. Therefore, do not apply any L7 profiles to your VS if you want to use SSL bridging (SSL bypass). If configured incorrectly, client requests will be rejected (TCP N-ACK).

 

I'd recommend to configure a second VS with TCP 443 port listener which will handle the SSL bridging. All other connections (non-SSL?) will be handled by your wildcard VS that has a L7 profile applied.

 

abi1980_184094's avatar
abi1980_184094
Icon for Nimbostratus rankNimbostratus
Apr 24, 2015
thanks hannes I have challenge though i have only one IP which can used as the listener IP , or the VIP