Forum Discussion

Siddharth_Gupta's avatar
Siddharth_Gupta
Icon for Nimbostratus rankNimbostratus
Nov 30, 2006

SSL enabling towards Internet

Hi,   I want to know if its possible for the LTM to terminate HTTPS on the client side, redirect the unencrypted HTTP to a pool of HTTP proxies and re-enable SSL on the way out to the internet.  ...
application delivery
dev
devops
iRules
Chad_Roberts_21's avatar
Chad_Roberts_21
Icon for Nimbostratus rankNimbostratus
Nov 30, 2006
That's actually the default scenario. If you enable SSL on the client side, but then you simply configure the pool members to respond on whatever port they listen on (80, for example), it will decrypt the traffic and forward it unencrypted to the pool members. You would actually have to configure another SSL profile for the server side if you wanted it encrypted between the F5's and the pool members as well.

 

 

For the record, I use the same scenario, because the traffic passes through IDP's in the process, and I don't want it encrypted at that point.