Forum Discussion
NimbostratusSite doesn't load while passing SSL traffic d to the web servers through F5.
All,
We are in the process of removing the SSL offloading config from F5. When i remove client SSL configuration and allow F5 to pass HTTPS traffic directly to the apache server , the page doesn't load. Alternatively if i access a web server directly bypassing F5, HTTPS page loads without any issues. Please advise.
5 Replies
rob_carrCirrocumulus
You might also need to remove the HTTP profile from the virtual server, if you had one assigned (not uncommon in SSL offload configurations).
Rajaraman_12066Will F5 still forward http request after removing profile ?
- rob_carrRemoving the HTTP profile will not prevent the BIG-IP from forwarding HTTP requests. Since HTTPS traffic is encrypted, the BIG-IP is unable to see the HTTP requests and simply load-balances the TCP connections.
Samir_Jha_52506Noctilucent
You need to enable default server profile with Https Vip. Hope It will work.
- Kevin_Stewart
Employee
You need to enable default server profile with Https Vip
This is not entirely true. As Rob states, to allow SSL to flow through the box without offload, you need to remove BOTH client and server SSL profiles AND any layer 7 profiles (like HTTP) that may attempt to evaluate the unencrypted payload.
