Forum Discussion

PK_Bhatia's avatar
PK_Bhatia
Icon for Nimbostratus rankNimbostratus
May 31, 2017

pain text connection between client and node

I have a situation where i have ssl client configured on VS listening on 443, pool members are listening on 9001. Everything works except it seems that connection between a user and node member seems to be in plain text, can anyone point me what I am doing wrong.

 

Why I can see connection between node and client? Isn't it should be connection between user and VS and connection between vs and pool members?

 

devops
LTM
  • dragonflymr's avatar
    dragonflymr
    Icon for Cirrostratus rankCirrostratus
    May 31, 2017

    Hi,

     

    Have you SNAT enabled on your VS? If not client IP is passed to backend server so you can be under impression that you see direct client to node session. If this is the case then your nodes have default gateway pointing to internal VLAN self IP on F5 as well.

     

    It is not the case. For Standard VS with SSL Offload you have alway two separate session:

     

    • Client to F5 (encrypted in this case)
    • F5 to node (unencrypted in this case)

    Piotr