Forum Discussion

Chris_Richards_'s avatar
Chris_Richards_
Icon for Nimbostratus rankNimbostratus
Aug 05, 2018

SSL Offload query

I'm trying to configure SSL offload but it is not working and bit puzzled why.

 

I've tested the site running on port 80 with no certificate. I've tested the site on 443 using both the client and server side ssl. On both occasions the site works.

 

When I change the settings to just use the client SSL the site does not work. All the statistics show the traffic getting to the website but the site does not load. Am I missing something with the setup on the F5 client SSL or would it be the website having an issue?

 

application delivery
BIG-IP Access Policy Manager (APM)
LTM
  • Phips_306701's avatar
    Phips_306701
    Icon for Nimbostratus rankNimbostratus
    Aug 06, 2018

    Hey,

     

    try to reconfigure your HTTPS pool so that the members are listening on port 80.

     

    [VIP 443] -> ssl offload -> [pool member 80]

     

    • Chris_Richards_'s avatar
      Chris_Richards_
      Icon for Nimbostratus rankNimbostratus
      Aug 06, 2018

      For the tests I'm doing I don't have a pool setup. The idea is to use traffic policies forward the correct head to the correct node. We have multiple sites running on several nodes.

       

      I've done a TCPDump of the connection. When looking at the information can see that the web server responds with TCP RST, suggsting that the IIS server is resetting the connection after receiving the HTTP GET