Forum Discussion
shaikhzaid
Altocumulus
Altocumulusvirtual server config
hey guys, i have a requirement wherein the url https://xyz.com:9999 will be accessed over the internet. Now once the NATing is done by the firewall, the traffic will be passed to virtual server (1....
Well, this is up to you.
Per my experience, some customers prefer to offload the SSL decryption task to the F5 unit, so that they don't have to perform additional decriptyon on the backend server farm, saving resources. This is usually also allows more agile administration, because you'll only need to renew the certificates on one appliance (BIG-IP) instead of every server.
Other customers prefer to perform SSL encryption in the backend as well because they prioritize information security across the whole network.You might want to discuss this with your engineering team, and if your servers require the SSL handshake to be performed, you'll need a serverSSL profile.
shaikhzaidAltocumulus
AltocumulusThanks i got it.
What about the ssl profiles ? should i include the ssl server profile in the VS as well ?
CA_Valli
MVP
MVPWell, this is up to you.
Per my experience, some customers prefer to offload the SSL decryption task to the F5 unit, so that they don't have to perform additional decriptyon on the backend server farm, saving resources. This is usually also allows more agile administration, because you'll only need to renew the certificates on one appliance (BIG-IP) instead of every server.
Other customers prefer to perform SSL encryption in the backend as well because they prioritize information security across the whole network.
You might want to discuss this with your engineering team, and if your servers require the SSL handshake to be performed, you'll need a serverSSL profile.
- shaikhzaid
Hello,
Thanks i understood your expalanation. 🙂
Appreciate it.