For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

newbie's avatar
newbie
Icon for Altostratus rankAltostratus
Feb 24, 2009

SSL Proxies

I am a novice when it comes to the BigIP's, so please cut me a slack if my question is too rudimentary. We're running the HA version 4.5 and need to setup an SSL connection. I have created an SSL Proxy for terminating it, however a bit confused as to what to use for the destination host. The manual is recommending to create a virtual server with the loopback address and use it as the destination host as opposed to using the WEB server. If I were to create a VIP, would my user be connecting to the VIP address or the SSL proxy address?

 

 

Thanks..

2 Replies

  • This is going back a few years but let me give it a shot

     

     

    Here is an example of creating a SSL Proxy

     

     

    Create a virtual address (Using a loopback address) containing a pool with N amount of servers in them

     

    Virtual 127.0.0.12:80 --> Pool_of_servers

     

     

    Create the SSL proxy the proxy address will be 192.168.1.12:443 (assuming that address is what your clients can get) and it points to 127.0.0.12:80 as the destination.

     

     

    Ultimately the client will go to the SSL proxy which will then forwarding to the loopback virtual and on to the servers.

     

     

    Hope this helps

     

     

    CB

     

     

  • Posted By axfalk on 02/23/2009 8:05 PM

     

    I am a novice when it comes to the BigIP's, so please cut me a slack if my question is too rudimentary. We're running the HA version 4.5 and need to setup an SSL connection. I have created an SSL Proxy for terminating it, however a bit confused as to what to use for the destination host. The manual is recommending to create a virtual server with the loopback address and use it as the destination host as opposed to using the WEB server. If I were to create a VIP, would my user be connecting to the VIP address or the SSL proxy address?

     

    Thanks..

     

     

    Is that version 4.5? If so dear God man.... update!