For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Suhail_128143's avatar
Suhail_128143
Icon for Nimbostratus rankNimbostratus
Apr 20, 2004

SSL Accelerator Configuration

Is there a sample code that sets up the basic SSL accelerator? I am looking for the simple steps that are needed to setup the BIG-IP for SSL acceleration.
dev
devops
iControl
v4
Joe_Pruitt's avatar
Joe_Pruitt
Apr 20, 2004
Currently there is no sample code that F5 has produced for SSL proxies. If you come up with something please feel free to post it to the section of the website.

 

 

Now, back to your question...

 

 

It is my understanding that the ITCMLocalLB::Proxy::create() method is all you need to issue to configure a SSL proxy.

 

 

void ITCMLocalLB::Proxy::create(  
      in IPPortDefinition proxy_def,  
      in ProxyTarget target,  
      in IPPortDefinition target_def,  
      in String key_file_name,  
      in String cert_file_name  
  );

 

 

There are also the create_ex(), create_ex_2, and the create_ex_3 that provide many more optional paramters.

 

 

These methods assume that you have the certificates already installed on the machine. Since the 4.5 version of the SDK has been released, we have introduced interfaces for management of the keys and certificates (ITCMManagement::KeyCertificate) but these interfaces have not been made public via our SDK. We plan to ship the next version of the SDK to align with BIG-IP v4.6.2 which is planned for this summer. If you absolutely need to use these methods, you can discover them via the WSDL documents on the BIG-IP (http://bigip_address/iControl/iControlPortal.cgi?WSDL).

 

 

Good luck, and let us know what kind of projects you are working on.

 

 

-Joe