Forum Discussion

Sly_85819's avatar
Sly_85819
Icon for Nimbostratus rankNimbostratus
Oct 13, 2009

SSL pass-through configuration

Can someone tell me how to I configure SSL pass-through for Standard VS? Basically we dont want to have SSL offloading on LTM and the server should have SSL cert. I have used 2 options suggested by F5...
application delivery
dev
devops
iRules
Sly_85819's avatar
Sly_85819
Icon for Nimbostratus rankNimbostratus
Nov 18, 2009
Missed description of above capture

 

The request is coming from the public ip 198.147.192.8 and hitting the VS 192.168.20.25. The pool member IP address is 192.168.16.6

 

Here is the working capture after changing the VS to L4.

 

 

10:26:09.443127 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25

 

10:26:18.331585 802.1Q vlan4094 P0 198.147.192.8.46476 > 192.168.20.25.https: S 1156719225:1156719225(0) win 64512 (DF)

 

10:26:18.332086 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.46476: S 2974381553:2974381553(0) ack 1156719226 win 4140 (DF)

 

10:26:18.375527 802.1Q vlan4094 P0 198.147.192.8.46476 > 192.168.20.25.https: . ack 1 win 64512 (DF)

 

10:26:18.376258 802.1Q vlan4094 P0 198.147.192.8.46476 > 192.168.20.25.https: P 1:71(70) ack 1 win 64512 (DF)

 

10:26:18.376514 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.46476: P 1:829(828) ack 71 win 4140 (DF)

 

10:26:18.422397 802.1Q vlan4094 P0 198.147.192.8.46476 > 192.168.20.25.https: P 71:253(182) ack 829 win 63684 (DF)

 

10:26:18.425823 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.46476: P 829:872(43) ack 253 win 4392 (DF)

 

10:26:18.472931 802.1Q vlan4094 P0 198.147.192.8.46476 > 192.168.20.25.https: P 253:812(559) ack 872 win 63641 (DF)

 

10:26:18.473942 802.1Q vlan4093 P0 198.147.192.8.46476 > 192.168.16.6.6800: S 1990251855:1990251855(0) win 4380 (DF)

 

10:26:18.474645 802.1Q vlan4093 P0 192.168.16.6.6800 > 198.147.192.8.46476: S 1366852104:1366852104(0) ack 1990251856 win 49640 (DF)

 

10:26:18.474651 802.1Q vlan4093 P0 198.147.192.8.46476 > 192.168.16.6.6800: . ack 1 win 4380 (DF)

 

10:26:18.474657 802.1Q vlan4093 P0 198.147.192.8.46476 > 192.168.16.6.6800: P 1:77(76) ack 1 win 4380 (DF)

 

10:26:18.475374 802.1Q vlan4093 P0 192.168.16.6.6800 > 198.147.192.8.46476: . ack 77 win 49564 (DF)

 

10:26:18.484404 802.1Q vlan4093 P0 192.168.16.6.6800 > 198.147.192.8.46476: P 1:64(63) ack 77 win 49640 (DF)

 

10:26:18.572778 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.46476: . ack 812 win 4951 (DF)

 

10:26:18.583764 802.1Q vlan4093 P0 198.147.192.8.46476 > 192.168.16.6.6800: . ack 64 win 4443 (DF)

 

10:26:18.584250 802.1Q vlan4093 P0 192.168.16.6.6800 > 198.147.192.8.46476: P 64:107(43) ack 77 win 49640 (DF)

 

10:26:18.584259 802.1Q vlan4093 P0 198.147.192.8.46476 > 192.168.16.6.6800: P 77:120(43) ack 107 win 4443 (DF)

 

10:26:18.584985 802.1Q vlan4093 P0 192.168.16.6.6800 > 198.147.192.8.46476: . ack 120 win 49640 (DF)

 

10:26:18.585964 802.1Q vlan4093 P0 198.147.192.8.46476 > 192.168.16.6.6800: P 120:679(559) ack 107 win 4486 (DF)

 

10:26:18.696550 802.1Q vlan4093 P0 192.168.16.6.6800 > 198.147.192.8.46476: . ack 679 win 49640 (DF)

 

10:26:18.811775 802.1Q vlan4093 P0 192.168.16.6.6800 > 198.147.192.8.46476: P 107:373(266) ack 679 win 49640 (DF)

 

10:26:18.815195 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.46476: P 872:1138(266) ack 812 win 4951 (DF)

 

10:26:18.911868 802.1Q vlan4093 P0 198.147.192.8.46476 > 192.168.16.6.6800: . ack 373 win 4752 (DF)

 

10:26:18.999749 802.1Q vlan4094 P0 198.147.192.8.46476 > 192.168.20.25.https: . ack 1138 win 63375 (DF)