For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

steve_011's avatar
steve_011
Icon for Nimbostratus rankNimbostratus
Dec 06, 2016

Terminate SSL and open TCP socket connection inside

I need to answer a socket tunnel request in the form of ssl://servername, terminate the SSL at the F5 and open a connection to the inside server on an arbitrary port over an unencrypted connection. T...
application delivery
devops
iRules
shaggy's avatar
shaggy
Icon for Nimbostratus rankNimbostratus
Dec 06, 2016

Can you provide the VS configuration from 'tmsh list ltm virtual ' and the associated iRule?

 

Client-side SSL and server-side HTTP design is usually accomplished by having a VS with a clientSSL profile, no serverSSL profile, and an HTTP profile. However, if there will be a mix of SSL/non-SSL pools associated with this VS, per the mentioned iRule, you may need to tweak the iRule (check out SSL::disable serverside - https://devcentral.f5.com/wiki/iRules.SSL__disable.ashx)