Forum Discussion

AjayPra_161698's avatar
AjayPra_161698
Icon for Nimbostratus rankNimbostratus
Feb 03, 2015

SSL offloading for https traffic

Scenario:   Nodes:Node1,Node2,Node3   Pool:Node1,Node2   Virtual Server:ABC   VIP 1.1.1.1   Port any   SSL offloading is configured on LTM with clientssl profile attached to the ...
application delivery
availability
design
LTM
TMOS
TMSH
shaggy_121467's avatar
shaggy_121467
Icon for Cumulonimbus rankCumulonimbus
Feb 03, 2015

do you mean combine? should be as simple as:

when CLIENT_ACCEPTED {
    if { [TCP::local_port clientside] != 443} {
        SSL::disable clientside
        SSL::disable serverside
    }
}
when HTTP_REQUEST {
    set uagent [string tolower [HTTP::header User-Agent]]
    if { $uagent contains "msie6" or $uagent contains "msie7" or $uagent contains "msie8" or $uagent contains "mozilla/4.0"}{
        pool pool1
    } else {
        pool pool2
    }
}
AjayPra_161698's avatar
AjayPra_161698
Icon for Nimbostratus rankNimbostratus
Feb 04, 2015
Hi Shaggy, I came across Non-SSL Connections setting on client ssl profile.I think with this setting we needn't to disable ssl for non https traffic Accepting non-SSL connections Using the Non-SSL Connections setting, you can configure the BIG-IP system to accept connections that are not SSL connections. In this case, connections pass through the BIG-IP system in clear-text format. By default, this setting is disabled. https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_configuration_guide_10_0_0/ltm_ssl_profiles.html