F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Prasath_Varatha's avatar
Prasath_Varatha
Icon for Nimbostratus rankNimbostratus
Jan 07, 2016

ServerSSL profile usage ??

what is server ssl profile ? when it needs to be used ?? where do it get certificate when f5 act as client ?? if there is no certificate at server and having serverssl profile in f5 still will the UR...
application delivery
LTM
Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Jan 07, 2016

The server ssl profile is used to set up the SSL between the F5 and a backend resource (from your F5 to your web server). In order to enable SSL, you need to have both a server ssl profile on your VIP and an ssl certificate (with a private key) on the web server. Without those two things, the SSL connection will fail (and you'd see an error message in the browser).

 

With the way the F5 works, you can set up the server ssl profile to ignore any ssl errors, which would allow you to use a self-signed cert on the server and one of the default server ssl profiles on the F5. That would allow for encrypted connected to the backend without having to deal with needing a valid cert.

 

So, you'd want to use a server ssl profile anytime you wnat the traffic between the F5 and your backend web server to be encrypted, and you could set the serverssl profile on the VIP to the defaultssl profile if you don't have your own you want to you. And the connection will fail unless the web server has a certificate as well.

 

Hope this helps.