Forum Discussion

Bastien_124165's avatar
Bastien_124165
Icon for Nimbostratus rankNimbostratus
Aug 14, 2013

SSL server profile with external website

Hello,   I'm trying to configure a VIP with SSL profile client and server. The backend node being a production externel HTTPS website.   I configure clientssl for the client ssl, but everything...
certificates
smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Aug 14, 2013

I see it now.

 

Nathan was right. The Client SSL Profile encrypts the client-side of the connection, and the Server SSL Profile encrypts the server-side of the connection. So if the connection to the Pool Member (the server-side) will be encrypted, you will need to apply a Server SSL Profile on the VIP. My comment about SNAT also still applies.

 

  • Bastien_124165's avatar
    Bastien_124165
    Icon for Nimbostratus rankNimbostratus
    Aug 14, 2013
    Yes, SNAT is enabled, I do see connections in the VIP statistics. I also see inbound and outbound traffic for the client side, nothing server side.