For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Frank_Murray_3's avatar
Frank_Murray_3
Icon for Nimbostratus rankNimbostratus
Nov 02, 2015

Need help with SSL passthrough while using SNAT and an irule

I cannot find the right combination to make this work. I have an irule that basically returns a maintenance page when the active pool members hit 0:   when HTTP_REQUEST { if {[active_members C...
Henrik_Gyllkran's avatar
Henrik_Gyllkran
Icon for Nimbostratus rankNimbostratus
Nov 03, 2015

Yes, for encryption all the way both the BIG-IP and the server needs cert and key. And they can be the same or different, doesn't matter. And yes, if you can get the cert and key from the server you can import it into the BIG-IP, it has the capability to import many different formats.

 

And also, note that in most cases you don't even need a particular cert and key on the server because the BIG-IP does not by default verify that it is issued by a proper CA and so on. One of the point of handling SSL on the BIG-IP is that you get a centralized certificate management.