For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ckteur_147055's avatar
ckteur_147055
Icon for Nimbostratus rankNimbostratus
Jul 02, 2014

HTTP PROFILE USE ?

Hello,   I should to know how works HTTP Profile because when I join my VIP without http profile its ok but with http profile it doesn't work ....   For example, in my case a web client connect...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 03, 2014

The architect take decision to not use SSL encryption on BIG-IP... The CAS server decrypt the client traffic and is too late to change the configuration .......

 

That certainly makes it difficult. Without the ability to see the unencrypted OSI layer 7 traffic, you're not going to be able to make any routing decisions based on it. You could potentially try ProxySSL:

 

http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ssl-administration-11-5-0/13.htmlconceptid

 

But your mileage may vary. The better option, in my humble opinion, is to explain to the architect the performance and security benefits of offloading SSL at the BIG-IP. If nothing else, it makes persistence MUCH more reliable.