Let's Encrypt on a Big-IP

This is what you need to do to get it running:

1. Create datagroup
2. Create iRule (just copy from blog)
3. Create clientssl profile matching your domains (see blog)
4. Populate domain.txt with your domains
5. Make appropriate changes to the config file
6. Assign iRule to the VS which is assigned to your domains (basically this is where the challenge-response traffic is handled and where your DNS is pointed)

The certificates lives on the F5, this is the point with this script implementation. So there is no distribution of the certificates unless you put it into the hook script. The best way of using SSL/TLS is to have it handled in front of the web servers by the F5 and run cleartext against the servers. The script is completely independent of any device, server, service type you put the F5 in front. The dependency is tight to the F5.

Hope this helps.