For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

PK_Bhatia's avatar
PK_Bhatia
Icon for Nimbostratus rankNimbostratus
May 31, 2017

pain text connection between client and node

I have a situation where i have ssl client configured on VS listening on 443, pool members are listening on 9001. Everything works except it seems that connection between a user and node member seems...
devops
LTM
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
May 31, 2017

Hi,

 

Have you SNAT enabled on your VS? If not client IP is passed to backend server so you can be under impression that you see direct client to node session. If this is the case then your nodes have default gateway pointing to internal VLAN self IP on F5 as well.

 

It is not the case. For Standard VS with SSL Offload you have alway two separate session:

 

  • Client to F5 (encrypted in this case)
  • F5 to node (unencrypted in this case)

Piotr