Forum Discussion

carlos2tone_240's avatar
carlos2tone_240
Icon for Nimbostratus rankNimbostratus
Dec 21, 2015

HTTPS load balancing

Hi there and thanks in advancing.   I'm trying to enable a load balacing including two server that use https and the access is by port 8443.   https://server01.myco.net:8443/SSFservice/SSFservi...
application delivery
LTM
carlos2tone_240's avatar
carlos2tone_240
Icon for Nimbostratus rankNimbostratus
Dec 28, 2015

Hi!

 

As I understood, the SSL profile for server and client on F5 MUST be the same cert installed on my 2 servers on the pool?

 

Am I correct ?

 

Thank you!

 

Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Dec 29, 2015
You don't configure a cert in the server profile. And no the cert on the pool members doesn't actually have to match the cert in the client ssl profile. This is the beauty of a full proxy architecture. You can configure you client ssl profile with a public CA certificate and use self signed on the pool members if you so wish. The default server ssl is sufficient to get you up and going as it ignores the cert presented by your pool members by default.