Forum Discussion

Luca_55898's avatar
Luca_55898
Icon for Nimbostratus rankNimbostratus
Jul 28, 2012

x-forwarded-for, ok with HTTPS?

Hi,     Can you use the X-Forwarded-For option if the virtual server is a HTTPS server doing SSL   offload?     The virtual server is configured on port 443, with a client SSL cert. T...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Jul 29, 2012
It'd be unusual for port 443 NOT to be doing SSL. You shouldn't need a server side cert... Just one for the client-side SSL (i.e. the connection FROM the client).

 

 

Yes, you can change the poolmembers to port 80 and configure SSL offload. However your don't HAVE to... The BigIP can (WIth a suitable cert to present to the clients) act as a MITM.

 

 

H