For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pawan_Rudra_144's avatar
Pawan_Rudra_144
Icon for Nimbostratus rankNimbostratus
Mar 30, 2014

Need help in F5 to pass HTTPS traffic to HTTP Server without Offloading

Hi All, I have a F5 LTM device with Virtual Server listening on port 443 however my actual server behind F5 is listening on Port 80. My requirement is to pass HTTPS traffic to web Server without SSL...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Mar 30, 2014

If I may add, port 80 is a very unusual port to host HTTPS traffic. Could it be that the web server is actually not encrypted? From the BIG-IP command line you can check this:

curl -kv https://x.x.x.x:80

where x.x.x.x is the IP address of the web server. If you get a valid HTML response, then you are indeed doing HTTPS on port 80. The following will test unencrypted access:

curl -v http://x.x.x.x

If you get a valid HTML response, then the web server is unencrypted and you need to apply a client SSL profile on the BIG-IP to offload the client side SSL.