F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Martin_Smith_58's avatar
Martin_Smith_58
Icon for Nimbostratus rankNimbostratus
Oct 19, 2012

Regular SSL/TLS for user connections to the LTM, with SNI support from LTM to the real webservers?

Hi there --   We have a client base that we truly can't force to support TLS SNI for HTTP traffic. However, we'd like to limit the number of IPs we put on our backend webservers. I'm wondering if ...
config
design
Martin_Smith_58's avatar
Martin_Smith_58
Icon for Nimbostratus rankNimbostratus
Oct 19, 2012

Hi Kevin,

 

It sounds like you're saying there's no way to set the SNI information on the fly, as the server SSL profile's Server Name block is also not settable on the fly. I'm not sure I want to create hundreds of server SSL profiles for every possible virtual host I want to use. I think, using this stated configuration, I'm already going to be stuck creating tons of client SSL profiles for the SSL offloading from the browser to the F5. So this solution will effectively double the number of profiles.

 

Hmmm. I will bring this back to my team and discuss. If anyone has any other ideas about how to pull something like this off, please keep posting! :)

 

 

Thanks all,

 

 

Martin