Forum Discussion

BJ_114988's avatar
BJ_114988
Icon for Nimbostratus rankNimbostratus
Jun 16, 2016

why do we attached http profile to SSL vip?

why do we attached http profile to vip on port 443?   My understanding that it is required for LB to understand web traffic after LB decrypt it..   Let me know your views..   Also..if there ...
  • Hannes_Rapp_162's avatar
    Jun 16, 2016

    HTTP profile is essentially a buffer+parser which checks whether the request format complies with the standard. When used, it opens up new possibilities for request/response adaption and payload modifications. It has some unintended benefits from the security standpoint too, for instance, it protects your web-servers from Slowloris attacks. So I would use it even when it's not a pre-requisite for your iRules or LTM policies.