For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tabish_Mirza_12's avatar
Tabish_Mirza_12
Icon for Nimbostratus rankNimbostratus
Feb 19, 2014

Virtual Server 443 for pool members running 443 & ssl certificate

Hi,

 

We have a requirement to do load balancing for webseal servers running 443 & ssl certificate. We want to configure a virtual server with 443 port to do load balance traffic between webseal server on port 443 without ssl offload on F5. We tried with standard Virtual Server but it didn't work.

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
LTM
security

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Feb 19, 2014

    Load balancing to SSL servers without SSL offload basically requires a basic layer 4 VIP, no client or server SSL profiles, no layer 7 (ie. http, ftp, etc.) profiles, and a pool that sends traffic to the nodes listening on 443. This is pure layer 4 (TCP) "tunneling" of SSL and above data. I would add too that this sort of configuration severely diminishes the F5's capabilities. Without access to the upper layer protocol data, you've basically turned it into a simple IP-based load balancer with minimal functionality. Even persistence is limited to source address.