Forum Discussion
RAQS
Cirrus
CirrusLTM (VIP on Port 443 and Backend Server on Port 80)
Hi Team, Can we terminate traffic on F5 LTM VIP on port 443 and in same setup backend members can be configured on port 80. Regards, ShashankS
Yes this is possible and a common configuration.
If you want to terminate SSL on the VIP make sure you have an HTTP profile and a client SSL profile.
You do not need to do anything special for HTTP to the backend, just add the TCP/80 pool members to your pool as normal.
Lee_Sutcliffe
Nacreous
NacreousYes this is possible and a common configuration.
If you want to terminate SSL on the VIP make sure you have an HTTP profile and a client SSL profile.
You do not need to do anything special for HTTP to the backend, just add the TCP/80 pool members to your pool as normal.
RAQSCirrus
CirrusThanks Lee, so do i need to have any special HTTP profile or just default one we can use.
Regards,
ShashankS
- Lee_Sutcliffe
You can use the default one but I would always advise creating a new one using the default ‘http’ profile as a parent, even if you don’t add any additional settings.
That way, if you need to change it in the future, you don’t affect other VIPs that use the same profile.
- RAQSThanks lee. Also, if possible can you please guide me in what all scenarios we use http profile ? If possible, please explain any use case. Really appreciate your time and help Regards, ShashankS
- Lee_Sutcliffe
You use an HTTP profile when you process HTTP traffic and want to put the VIP in full layer 7 (OSI) mode.
This allows you, if you wanted, to intercept HTTP requests and responses and perform an action on them.
Min your case, it is needed to terminate SSL