Forum Discussion

KMA_50449's avatar
KMA_50449
Icon for Nimbostratus rankNimbostratus
Jul 16, 2008

Reverse proxy SSL with LTM : https with bigip, then http

Hi,     We have LTM with ssl accelerator card, so time to use them !     What I try to do seems easy :     Request :   Client -> https -> Bigip wit...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jul 16, 2008
Hello Kevin,

 

 

If the error in the browser is immediate, I'd guess the client SSL profile ciphers are incompatible with the ones the browser is trying to use. If the error takes a while, I'd guess the default gateway on the web server isn't set to LTM's floating self IP on the server VLAN. The latter can be fixed by either changing the default gateway on the server or enabling SNAT automap on the VIP. Another possibility is address translation is disabled on the VIP.

 

 

Aaron