Forum Discussion

Krzysztof_Bronk's avatar
Krzysztof_Bronk
Icon for Nimbostratus rankNimbostratus
Dec 12, 2017

VS on any port with pool members on any port while offloading client ssl and using server ssl

Hello dear F5 experts,

 

Is it possible to setup the following: - 1 VS with All Ports -> 1 Pool with same ports - while offloading client SSL - AND using different SSL for pool members

 

In other words, if a request reaches VS:3000, SSL is offloaded, and a server SSL is used for random Member:3000. Have both certificates and keys of course.

 

I know this is possible per port in combination with application services, but if I have 2000 ports to cover, I really don't want to maintain a VS or App per port.

 

BIG-IP
devops
LTM
  • Patrik_Jonsson's avatar
    Patrik_Jonsson
    Icon for MVP rankMVP
    Dec 18, 2017

    Should be no problem.

     

    1. Make the VS listen to any port
    2. Disable port translation in the VS config
    3. Add client and server SSL profiles in the VS config

    Members still has to be added by port, but clients will be sent to whatever destination port they came in with.

     

    /Patrik