Forum Discussion
BJ_114988
Nimbostratus
Nimbostratuswhy do we attached http profile to SSL vip?
why do we attached http profile to vip on port 443?
My understanding that it is required for LB to understand web traffic after LB decrypt it..
Let me know your views..
Also..if there ...
HTTP profile is essentially a buffer+parser which checks whether the request format complies with the standard. When used, it opens up new possibilities for request/response adaption and payload modifications. It has some unintended benefits from the security standpoint too, for instance, it protects your web-servers from Slowloris attacks. So I would use it even when it's not a pre-requisite for your iRules or LTM policies.
Hannes_RappNimbostratus
NimbostratusHTTP profile is essentially a buffer+parser which checks whether the request format complies with the standard. When used, it opens up new possibilities for request/response adaption and payload modifications. It has some unintended benefits from the security standpoint too, for instance, it protects your web-servers from Slowloris attacks. So I would use it even when it's not a pre-requisite for your iRules or LTM policies.
BJ_114988Thank you so much for answer..Finally understood why to use http profile..:) We are enabling cookie persistence on http vip with http profile... now it should work!! and just in case if user want to enable cookie persistence on ssl terminated VIP that is on vip with port 443.....do we still need to enable http profile on vip or will work with default tcp profile?
Vijay_ECirrus
You would need HTTP profile for HTTP Cookie Persistence.- BJ_114988Thanks all for your answers!! really helped!! cherrs!