For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rpalacios_79340's avatar
rpalacios_79340
Icon for Altostratus rankAltostratus
May 19, 2009

Terminating SSL on F5.

Hello guys,     I read that you can use the F5 to offload SSL certificate-verification tasks from client and server systems.     I have a few questions about this configuration; ...
config
design
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
May 19, 2009
Oh, and regarding point 2, the other advantage is that if you are doing SSL offload, you can then use Layer 7 iRules and cookie persistence and other fun Layer 7 stuff. If you are passing SSL connections through the LTM to the webservers without doing offload, you can't "see" into the encrypted packets and thus you are restricted to Layer 4 iRules and source IP persistence.

 

 

Denny