Forum Discussion
W__Tout_99150
Nimbostratus
Jun 27, 2008SSL encryption on outgoing requests
We have multiple 3rd parties to which we connect over https. We're considering moving the SSL encryption from our application to the load balancer to reduce the load on the application. Is it feasible...
hoolio
Cirrostratus
Jul 07, 2008Sorry, I didn't see your last post.
If you can use an internal IP address you'd configure a pool with the pubic IP address and port you want to connect to. Then create a VIP using the internal IP address on port 80. Add a server SSL profile to the VIP and it should work.
You could also configure the VIP using the actual public IP of the external server. You'd need to disable ARP on the virtual address and ensure there is a route on the client to the public IP through LTM. Here is a sample config using Gmail as a public HTTPS site:
pool gmail_https_pool {
member 64.233.171.83:https
}
virtual address 64.233.171.83 {
arp disable
}
virtual gmail_https_vs {
destination 64.233.171.83:http
snat automap
ip protocol tcp
profile serverssl tcp
pool gmail_https_pool
}
Aaron
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects