For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lavanya_53665's avatar
Lavanya_53665
Icon for Nimbostratus rankNimbostratus
Jan 31, 2014

LDAP and LDAPS load balancing question

Hello   We would like to load balance Active directory ldap and ldaps traffic via F5. I am looking through the F5 guide, can we assign SSL profile only to ldaps traffic or are able to assign diffe...
deployment
devops
iApps
microsoft
security
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Jan 31, 2014

You can setup two virtual servers with the same VIP, one listening on 389 and the other on 636. You'd only apply a server-side SSL profile to your 389 virtual server to encrypt the communications between the F5 and your LDAP server. No SSL profiles would need applied to your 636 virtual server as it would maintain end-to-end encryption. Same pool could be used for both virtual servers.

 

  • Dave_C_15073's avatar
    Dave_C_15073
    Icon for Nimbostratus rankNimbostratus
    Feb 05, 2016
    Can the F5 expose LDAPS (port 636) with an external certificate, terminate the secure connection and then establish an internal LDAPS connection using an internal certificate from the internal LDAP server?