Forum Discussion

cymru81's avatar
cymru81
Icon for Altocumulus rankAltocumulus
Jul 24, 2017

ssl pools

Hi, i dont even know if this is a supported config. We have a VIP listening on TCP443 thats doing ssl offload (certificate on LTM too) and we want the traffic sent to a pool with its members listeni...
LTM
security
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Jul 24, 2017

Hello Cymru,

 

Please verify that you have applied a client SSL profile and a server SSL profile on the VS.

 

Just to clarify, when you say "SSL Offloading" this means that you only encrypt trafic between the "client and the VIP". In this case you will only put an "client SSL profile" on your VS

 

But if your backends/servers listen on 443 I think that they probably wait for an SSL handshake from the F5. So you will need to add also "server SSL profile" on your VS.¨

 

Regards