For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

W__Tout_99150's avatar
W__Tout_99150
Icon for Nimbostratus rankNimbostratus
Jun 27, 2008

SSL encryption on outgoing requests

We have multiple 3rd parties to which we connect over https. We're considering moving the SSL encryption from our application to the load balancer to reduce the load on the application. Is it feasible...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 27, 2008
Hi,

 

 

You could create an HTTP VIP defined with the IP:port of the external server. Disable address translation and add a server SSL profile to the VIP. You could enable the VIP only on the VLAN that your client host is connected on. The host would connect to the VIP via HTTP. The BIG-IP would proxy a serverside connection via HTTPS.

 

 

Aaron