Forum Discussion

lizunjjg_280139's avatar
lizunjjg_280139
Icon for Nimbostratus rankNimbostratus
Jul 11, 2018

i have client ssl off_load question

hi guys 1. client ssl off_load VIP is on port 443 and pool members also in service port 443 . 2. pool members can not change port (also 443 ) They want to do ssl offload on the VIP will it work???

 

application delivery
LTM
  • Lee_Sutcliffe's avatar
    Lee_Sutcliffe
    Icon for Nacreous rankNacreous
    Jul 11, 2018

    Providing you have an HTTP profile and a client-ssl profile it will work as F5 is a full TCP proxy. Having both the virtual server and pool members on the same port will not affect the connectivity and the ability off load SSL.

     

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jul 11, 2018

    Hi,

     

    Your server backend listen in https too?

     

    in this case it's not ssl ofload but interception and you need ssl client and ssl server profile.

     

    regards

     

  • lizunjjg's avatar
    lizunjjg
    Icon for Cirrus rankCirrus
    Jul 11, 2018

    hi The server only use port 443. server side do not encryption.