Forum Discussion

Dazzla_20011's avatar
Dazzla_20011
Icon for Nimbostratus rankNimbostratus
Mar 25, 2011

Server-side SSL

Hi,     Currently we only do client-side SSL on the F5. I've been asked if we can encrypt the traffic from the F5 to web servers. I know the F5 can do server side ssl so just wonderered if some...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Oct 17, 2011
sorry to confuse you. i might misunderstand you a bit.

 

 

in case of serverssl, if bigip does not need to present client certificate to pool member (client certificate authentication), you do not need to import anything to bigip. default serverssl profile could work.

 

 

however, if bigip has to supply client certificate to pool member, both client certificate and private key must be imported to bigip since private key is required to decrypt traffic between bigip and pool member.