Forum Discussion

Qasim's avatar
Qasim
Icon for Cirrostratus rankCirrostratus
Jun 12, 2019

Sending traffic to pool nodes on Secure port?

Hi,   Just need a little information on how the LTM works when sending traffic to pool nodes. I want to offload ssl on LTM but also want to use secure port for backend nodes.   E.g. I want V...
application delivery
iRules
LTM
security
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Jun 12, 2019

SSL offloading is when SSL is terminated on F5 on the client-side. This requires a client-ssl profile and HTTP profile assigning to the virtual server.

 

To re-encrypt traffic to your pools you will need to use a server-ssl profile to encrypt the server-side connection.

Using this method you can manipulate HTTP headers as F5 is in the middle of each SSL termination and is able to provide end to end encryption

 

K14806: Overview of the Server SSL profile (11.x - 15.x)

https://support.f5.com/csp/article/K14806