Forum Discussion
ramesh_110176
Nimbostratus
Jun 01, 2009iRule SSL passthrough
Hi  
       
     I would like incoming SSL connection to terminate on the webserver, instead of the LTM.  
       
     I have the below irule:  
       
     when HTTP_REQUEST {  
       SSL::disabl...
hoolio
Cirrostratus
Jun 15, 2009Hi Jan, 
If you want to pass the SSL through, then you can configure a standard TCP virtual server without an HTTP profile. Typically, the virtual server and the pool member(s) should be configured on port 443.
If you want to decrypt the SSL, you need to import the cert and key, create a custom client SSL profile and add it to a standard TCP virtual server. Typically, the virtual server should be configured on port 443 and the pool member(s) should be configured on port 80.
If you try one of these options and it doesn't work, try posting your virtual server and profile configuration using 'b virtual VIRTUAL_NAME list' and 'b profile clientssl CLIENTSSL_PROFILE_NAME list'.
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects