For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eben's avatar
eben
Icon for Nimbostratus rankNimbostratus
Jan 11, 2017

VS not working as it should.

Hi Experts,   I am trying to deliver a couple of applications to my clients. below are the details and what I have observed.   I have 2 nodes. 1. Ports 443 on those nodes service a particular a...
application delivery
LTM
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Jan 11, 2017

The ports you use don't matter, as long you apply the correct ssl profiles. If you are just doing SSL offloading, you just need clientssl profile. If you need to see the HTTP data, you need a clientssl profile and serverssl profile.

 

If you are using SSL, but you don't have ssl profiles in the virtual server, the SSL handshake will be between the client and server. In this case if you add a HTTP profile, it won't work as it will not be able to see the HTTP data.

 

Lastly, you can use one port in the virtual server, and a another one in the pool member. Just make sure port translation is enabled in the virtual server.

 

This article have a good explanation about how SSL works in F5 world:

 

https://devcentral.f5.com/articles/ssl-profiles-part-1