Two-way (mutual) SSL Authentication on server side?

Question

One of my internal apps needs to call an external API that requires mutual SSL auth.&nbsp;
Can my app call my LTM, and my LTM call the external API with mutual auth?&nbsp;
I only see the ability to do mutual auth on the client-side SSL profiles, not the server side.&nbsp;
Thanks&nbsp;

kevin_davies · Answer

Implementing Proxy SSL on a Single BIG-IP System&nbsp;
https://support.f5.com/csp/article/K13385&nbsp;

kevin_davies · Answer

You need SSL tunnelling. This is where the F5 does not handle the SSL traffic at all. Just create a simple virtual server with SNAT automap, a pool and that it. No HTTP profile, no SSL profiles. Then the client negotiates SSL with the backend server directly and the F5 is not involved at all.&nbsp;

Forum Discussion

Recent Discussions

Changes to DO and AS3 GitHub - no longer monitored

SSL Forward Proxy, iRules and Client Hello

monitor/healthcheck issue with envoy gateway

Recommendation for Adv. Lab

How to Verify config before loading to F5

Related Content

What is Mutual TLS (mTLS)?

Selective mutual authentication by HTTP::Host

F5 BIG-IP Access Policy Manager (APM) - Google Authenticator and Microsoft Authenticator

Verifying Slack Requests with Mutual TLS

Mutual authetication from imperva to F5