Forum Discussion
NimbostratusMutual TSL Between Two BigIPs
Hello,
I am trying to determine how Mutual TLS (mTLS) can be implemented between 2 Big IPs for API calls. The certificates will reside on the two BigIPs where the authentication will occur. The objective is to isolate the applications such that no changes are required to the applications or certs need to be loaded exchanged between the apps and the Big IP.
Based a several AI searches, this is possible but haven't been able to find explicit documentation on if it is supported and how it can be implemented.
Any help is appreciated.
Client App --> BigIP 1 -mTLS- Big IP 2 --> Server App
1 Reply
- Mayur_Sutare
MVP
Here, you need to configure SERVER-SSL profile on BigIP-1 to send required certificate to BigIP-2 to complete mTLS handshake. On BigIP-2 side, you will configure Client-SSL profile with mTLS configuration as usual.
Hope it helps!
