Forum Discussion
Sly_85819
Nimbostratus
Oct 13, 2009SSL pass-through configuration
Can someone tell me how to I configure SSL pass-through for Standard VS? Basically we dont want to have SSL offloading on LTM and the server should have SSL cert. I have used 2 options suggested by F5...
If you want to use the efficiency of a FasL4 profile you give up the functionality of decrypting SSL using a client SSL profile and inspecting or modifying the HTTP using an HTTP profile.
If you need to load balance based on HTTP content, you would have to switch to a standard TCP VIP and add a client SSL and HTTP profile to the VIP. You could then insert an HTTP persistence cookie.
An alternative would be to use SSL session ID persistence. I think this would also require using a standard TCP VIP instead of a FastL4, but it would allow you to avoid decrypting (and re-encrypting) the SSL.
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects