F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Felix_29330's avatar
Felix_29330
Icon for Nimbostratus rankNimbostratus
Apr 19, 2011

LTM Setup to Offload POPS, SMTPS, IMAPS Traffic

Hi,

 

 

My server admin unit wants me to setup an LTM to terminate and offload SMTPS, POPS, IMAPS traffic from clients, destined to some mail servers.

 

 

I have configured and associated a Client SSL profile to the virtual servers for the individual protocols.

 

 

However, the servers are also operating on the secure ports of 465, 995 and 993. Therefore I am wondering if it is necessary to create a Server SSL profile too for the communication between the LTM and the servers ?

 

 

Thanks in advance for your assistance.

 

 

Felix

 

 

config
design

3 Replies

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Apr 21, 2011
    Yes, you'll need a serverside SSL profile if the servers are expecting secure traffic. Are you doing anything at the LTM that requires offloading? if just doing simple load balancing, you can just pass the traffic through securely.
  • Felix_29330's avatar
    Felix_29330
    Icon for Nimbostratus rankNimbostratus
    Apr 28, 2011
    Hi Jason,

     

     

    Thanks for your helpful response.

     

     

    I am performing only simple load-balancing on the LTM, nothing else.

     

     

    If I want to allow the secure traffic to pass through without terminating, could I accomplished that by simply setting the SSL Profile (Client/Server) options to NONE in the virtual servers configuration?

     

     

    Felix

     

     

     

     

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Apr 28, 2011
    Yes, if just load balancing, don't mess with the client/server ssl profiles at all and the traffic will pass through encrypted with no problems.