Forum Discussion

Sly_85819's avatar
Sly_85819
Icon for Nimbostratus rankNimbostratus
Oct 13, 2009

SSL pass-through configuration

Can someone tell me how to I configure SSL pass-through for Standard VS? Basically we dont want to have SSL offloading on LTM and the server should have SSL cert. I have used 2 options suggested by F5...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 18, 2009
When you change from standard to Forwarding IP or in reverse, quite a few settings change. It would be interesting to compare the actual config from the two VIP configurations. If you're able to, you could configure a test VIP even on the same IP but a different port to test this further. If there are restrictions getting to the test VIP, you could test using curl from the LTM command line:

 

 

curl -kv https://1.1.1.1/index.html where 1.1.1.1 is the VIP IP.

 

 

Of if you have a binary formatted tcpdump from a failure with a standard VIP, you could use ssldump to get more info on a possible SSL handshake problem.

 

 

Aaron