For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

EuropeanITCrow1's avatar
EuropeanITCrow1
Icon for Cirrus rankCirrus
Jul 11, 2017

SSL Mirroring when using Proxy SSL

Hi guys,

 

to perform a failover as seamless as possible we use the SSL Session Mirroring feature. Now I haven't found any documentation if it makes sense to use it together with the Proxy SSL feature.

 

What's your opinion and why?

 

Thanks and regards!

 

application delivery
fail over
LTM
ssl

1 Reply

  • Jad_Tabbara__J1's avatar
    Jad_Tabbara__J1
    Icon for Cirrostratus rankCirrostratus
    Jul 11, 2017

    Hi,

     

    According to the article K13385: Overview of the Proxy SSL feature, The Proxy SSL feature provides the BIG-IP system the ability to optimize Secure Sockets Layer (SSL) traffic between the client and the destination server without having the SSL connection terminate on the BIG-IP system

     

    And according to the article K7216: BIG-IP support for SSL connection mirroring, the SSL connection mirroring feature is only for mirrored SSL connections that are terminated by the BIG-IP system.

     

    So I think that Proxy SSL connections will be lost and can not be mirrored

     

    Regards