Forum Discussion
RAQS
Cirrus
CirrusLTM (VIP on Port 443 and Backend Server on Port 80)
Hi Team,
Can we terminate traffic on F5 LTM VIP on port 443 and in same setup backend members can be configured on port 80.
Regards,
ShashankS
Yes this is possible and a common configuration.
If you want to terminate SSL on the VIP make sure you have an HTTP profile and a client SSL profile.
You do not need to do anything special for HTTP to the backend, just add the TCP/80 pool members to your pool as normal.
- Lidev
MVP
Hello shashankS,
yes of course, it's called SSL Offloading🙂
Take a look on this post https://devcentral.f5.com/s/question/0D51T00006i7hoVSAQ/how-to-configure-ssl-offload
Lee_SutcliffeNacreous
Yes this is possible and a common configuration.
If you want to terminate SSL on the VIP make sure you have an HTTP profile and a client SSL profile.
You do not need to do anything special for HTTP to the backend, just add the TCP/80 pool members to your pool as normal.
RAQSThanks Lee, so do i need to have any special HTTP profile or just default one we can use.
Regards,
ShashankS
- Lee_Sutcliffe
You can use the default one but I would always advise creating a new one using the default ‘http’ profile as a parent, even if you don’t add any additional settings.
That way, if you need to change it in the future, you don’t affect other VIPs that use the same profile.
