Forum Discussion

Jonathon_Page's avatar
Jonathon_Page
Icon for Nimbostratus rankNimbostratus
Jan 20, 2017

HTTPS LTM iRule for overloading a VIP - HTTPS web server internally not encrypting

Hi, I've used the articles on here to create a single VIP with an iRule to switch pools using the URL::host value, This has been working great for internal services that are HTTP. I'm trying to ...
application delivery
big-ip ltm
irule
iRules
LTM
security
ssltls
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Jan 20, 2017

Assuming that the server initiates SSL/TLS connection for this "internal HTTPS" service, you should use client SSL profile on a VS:443. If you require end-to-end encryption, you can utilize server side SSL profile too. However, I would recommend that you test out with client side SSL profile before implementing server side SSL profile. Use a separate VS:443.