For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Manish_Jain_573's avatar
Manish_Jain_573
Icon for Nimbostratus rankNimbostratus
Jul 29, 2014

port forwarding on SSL pass through VIP

Hello,

 

Can you please assist to configure Standard SSL VIP where i need to transfer any request which is coming to SSL port to port 8443, my servers are configured with port 8443. VIP is SSL pass through (No SSL offload on F5). I need to configure source address persistence also for this VIP.

 

Does this configuration work:

 

Pool members with port 8443 VIP with SSL (443 ) Under Resources : pool members with 8443 as default pool

 

Thanks,

 

application delivery
deployment
LTM
TMOS
TMSH

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Jul 29, 2014

    SSL tunneling (no SSL offload) simply requires that you not assign a client and/or server SSL profile to the VIP, and that you not apply any layer 7 protocol profiles to the VIP as well (ie. HTTP). Address and port translation are layer 4 functions. So in your case, you simply need a pool of servers listening on any port (port translation is default enabled), a VIP listening on port 8443, and a generic source address persistence profile applied.