Forum Discussion

Anthony's avatar
Anthony
Icon for Nimbostratus rankNimbostratus
May 08, 2019

iRule redirect to another Virtual - is it classed as server side?

I am carrying out a piece of work to send specific requests off to another HTTPS virtual server, but getting stuck on decrypt/encrypt of the traffic.   The calls land on VS1:443 and clientssl prof...
BIG-IP
devops
ssl
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
May 09, 2019

Virtual creates an internal connection on the server side of the first Virtual Server, so if you have a Client SSL profile on VS2 you will need to ensure you have a Server SSL profile on VS1 to ensure the SSL/TLS connection works correctly.

If you have SSL off load at the backend of VS1 then you can have an iRule to disable the Server SSL profile when not using the 

virtual
command to forward, this will ensure that both native and 
virtual
connections from VS1 work correctly.