For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

helenio's avatar
helenio
Icon for Nimbostratus rankNimbostratus
Jul 03, 2014

Load balance HTTPS traffic without SSL decription

Hello,

 

may I load balance HTTPS traffic toward HTTPS Servers with SSL (all server have the same certificate). Actually I like that LTM does only Layer 4 load balancer without any SSL operation. Encryption offload is done by the server on the pool.

 

May also insert cookie for persistence ?

 

application delivery
layer 4
LTM

3 Replies

  • Ram_T_S's avatar
    Ram_T_S
    Icon for Altostratus rankAltostratus
    Jul 16, 2018

    One more doubt on this query

     

    can the Irule will work effectively for Https pool if we do not configure SSL certificate on the LB?

     

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Jul 03, 2014

    You would need to terminate the SSL Connection in order to utilise layer7 persistence i.e. using cookies.

     

    As you mention, the BIG-IP does not have to terminate the SSL traffic and can simply deliver the traffic to the backend pool members as is.

     

    If you need any layer7 capabilities but don't wish to terminate the SSL connection on the BIG-IP then you could use the Proxy SSL feature of the client/server SSL profiles.

     

    Hope this helps,

     

    N