How to setup internal virtual server and get TLS 1.3 keys from external virtual server via sideband?
Hi,
We have started evaluating LTM and as part of integration for decrypting PFS with BIG-IP VE , I have attempted to create internal virtual server to which a sideband connection from external virtual server is made via iRule, but we are seeing issue while creating sideband connection.
I have used UI to create internal virtual server and I would like to check what configuration should we need to use for internal virtual server so that we can have successful sideband connection ?
In the iRule of External virtual server we are able to get TLS 1.3 keys in CLIENT_HANDSHAKE but we are not able to connect to internal virtual server and send those keys. Any help resolving this issue is appreciated.
Internal Virtual server config:
Type: Standard,
Destination 1.1.1.1 (non routable ip) , Port : <Port of internal node>
Profiles: tcp
Oneconnect
Pool: Internal Server pool which has one member listening for http requests.
External Virtual server:
Default config, uses iRule to get TLS 1.3 keys and send them to Internal server.