How Proxy SSL works on BIG-IP

1. Lab Scenario Lab test results: Client completes 3-way handshake with BIG-IP and BIG-IP immediately opens and completes 3-way handshake with back-end server Upon receiving Client Hell...
Published Sep 04, 2019
Version 1.0
BIG-IP
security
ssl
tls
Saravanan_M_K's avatar
Saravanan_M_K
Icon for Employee rankEmployee
Sep 05, 2019

 One small typo in the Cipher Suite format diagram.

 

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

 

The hashing function in the cipher suite represents either MAC or PRF (Pseudo Random Function) depending on the cipher. For AES_GCM, it represents PRF, because AES_GCM is an AEAD cipher which has inbuilt MAC functionality called GHASH. Thus it does not need a separate MAC algorithm.