Forum Discussion

abi1980_184094's avatar
abi1980_184094
Icon for Nimbostratus rankNimbostratus
Apr 24, 2015

hi

i am using a wildcard VIP to loadbalance 433 , 5222 and 5223 connections   I will using a VIP with a standard :L7 profile . Is it possible to perform SSL briding using an L7 profile for my 443 co...
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Apr 24, 2015

You can't access L7 information in F5 with SSL bridging. Therefore, do not apply any L7 profiles to your VS if you want to use SSL bridging (SSL bypass). If configured incorrectly, client requests will be rejected (TCP N-ACK).

 

I'd recommend to configure a second VS with TCP 443 port listener which will handle the SSL bridging. All other connections (non-SSL?) will be handled by your wildcard VS that has a L7 profile applied.

 

Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Apr 24, 2015
You will not need a new IP for it. Use the same IP address for new TCP:443 port VIP. Connections will be processed by the closest-match VIP. Regards,