Forum Discussion
CirrusSSL Offloading
CirrocumulusWhen SSL is offloaded to the BIG-IP, the traffic must be sent to a port that is listening for and expecting NON encrypted traffic (port 80). If you send it to a back-end server that is expecting 443, or encrypted traffic, it will not understand it.
HERE is some good info on that topic!
Hope that helps! If it does please up-vote and select this answer, it'd be greatly appreciated!
-Dylan
Michael_Saleem1SSL Termination Mode Description SSL Profiles
SSL Offload The SSL certificate is terminated on the virtual server only. The BIG-IP receives the encrypted traffic, decrypts it and forwards it plain text to the backend servers This reduces processing burden on the backend servers and therefore increases performance CLIENT-SSL PROFILE
SSL Bridging The SSL certificate is terminated on *BOTH* the virtual server and backend servers. This is referred to end-to-end encryption. The BIG-IP receives encrypted traffic, decrypts and re-encrypts it on the backend, forwarding it encrypted to the backend servers CLIENT-SSL PROFILE & SERVER-SSL PROFILE
SSL Pass Through The SSL certificate is terminated on the backend servers only. The BIG-IP simply forwards the SSL encrypted traffic to the backend servers NO SSL PROFILE
- Dylan_375544
That's a good chart!
GLM_191985HERE is some good info on that topic!
I don't get what you want to share on this link?
I believe it doesn't matter on backend server , what port it listen on.. Any link with example?
- Dylan_375544
That link had a lot more info when I first posted it, strange.
HERE is a (hopefully) more useful link!
Yes, you are correct is saying it doesn't really matter what port NUMBER the back-end servers are listening on, as long as they are listening for plain text, unencrypted traffic. That is, assuming you are doing SSL offloading (Client side SSL profile and NO Server side SSL profile.)
Hopefully that clears some things up!
-Dylan
