Forum Discussion
dan_k_177224
Nimbostratus
NimbostratusSSL Cert for Passthrough
WIll I need to update my SSL certificate with F5 VIP ip's if I plan to use the F5 to passthrough SSL traffic.
Clients will connect to the F5 VIP's but SSL will be handled by the pool members. ...
nathe
Cirrocumulus
Cirrocumulus"If the F5 uses SNAT, this means the backend pool servers see all connections with a source address of the F5 self ip" - yes, floating (if exists) takes precedence over the non-floating one. The backend server shouldn't care - this setting will ensure all traffic is returned to the big-ip when the server's default gateway is something else.
You'll need an SSL/TLS certificate and key on the backend web server to decrypt the traffic.
Rgds
N
