Forum Discussion

Jan_Rockstedt_4's avatar
Jan_Rockstedt_4
Icon for Nimbostratus rankNimbostratus
Apr 29, 2013

VS for ssl pass-thru

Hi,     I have setup a standard VS for ssl pass-thru on port 443, but I see that there is not much I can enable to get this to work. No http profile, no oneconnected, no cert ...   Is ther...
config
design
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Apr 29, 2013
If by "SSL pass-thru" that you don't want to decrypt and re-encrypt, then a standard, performance L4, or most of the other virtual server types will work. You must not apply any profiles that would try to act on unencrypted (L7) data, so no HTTP profile. You can still apply profiles that act on L4 data though, so SNAT is okay. Simply create a standard (or Perf L4) virtual server and do NOTHING but assign the destination IP and port and the pool of 443 servers, this will allow SSL pass-thru.