For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smalex_355988's avatar
smalex_355988
Icon for Nimbostratus rankNimbostratus
Apr 10, 2018

HTTPS virtual server URL not working after attaching http profile

Have got a virtual server with service port 443 without client/server SSL profile. When HTTP profile is attached virtual server is not accessible. Please help.  
application delivery
LTM
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Apr 10, 2018

Hello,

 

When you set a HTTP profle with TLS/SSL (between client an backend trough F5) flow you have to process interception by setting client ssl and server ssl.

 

A virtual server with an associated HTTP profile processes connections using the BIG-IP system's full proxy architecture for the purpose of making requests on behalf of clients. In this mode, the BIG-IP system processes the three-way TCP handshake and initial data packet on the client-side connection before initiating the TCP handshake on the server-side connection; the client's data packet triggers the BIG-IP system to initiate the server-side connection.

 

So in this case F5 manage all your request as full proxy so if you set a HTTP profile without interception for ssl/tls flow it will not work as wanted...

 

https://support.f5.com/csp/article/K40243113

 

Let me now if it's clear...