Forum Discussion

EuropeanITCrow1's avatar
EuropeanITCrow1
Icon for Cirrus rankCirrus
Jul 11, 2017

SSL Mirroring when using Proxy SSL

Hi guys,

 

to perform a failover as seamless as possible we use the SSL Session Mirroring feature. Now I haven't found any documentation if it makes sense to use it together with the Proxy SSL feature.

 

What's your opinion and why?

 

Thanks and regards!

 

application delivery
fail over
LTM
ssl
  • Jad_Tabbara__J1's avatar
    Jad_Tabbara__J1
    Icon for Cirrostratus rankCirrostratus
    Jul 11, 2017

    Hi,

     

    According to the article K13385: Overview of the Proxy SSL feature, The Proxy SSL feature provides the BIG-IP system the ability to optimize Secure Sockets Layer (SSL) traffic between the client and the destination server without having the SSL connection terminate on the BIG-IP system

     

    And according to the article K7216: BIG-IP support for SSL connection mirroring, the SSL connection mirroring feature is only for mirrored SSL connections that are terminated by the BIG-IP system.

     

    So I think that Proxy SSL connections will be lost and can not be mirrored

     

    Regards