For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Leon_85602's avatar
Leon_85602
Icon for Nimbostratus rankNimbostratus
Aug 31, 2009

SSL in backend servers does not support cookie persistence?

I have three IIS servers behind the F5. SSL function is not offloaded to F5. I have enabled certificates on the IIS servers to encrypt the connection.     If I choose "none" for my http pr...
application delivery
dev
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 31, 2009
Cookie persistence requires an HTTP profile.

 

 

In fact, if you aren't terminating SSL on the BigIP, your persistence options become very limiting. You have source and destination address and SSL session ID. Destination doesn't really make sense unless combined with other values, and source address can change if clients (or your servers) are behind NATs. SSL session ID is also difficult to persist off of because browsers will renegotiate SSL at their will.

 

 

Kevin