Lightboard Lessons: Air Gap Architectures
In this episode of Lightboard Lessons, Jason covers a couple deployment options for routing traffic through an IPS tier while maintaining source IPs. The first option compresses the external and inte...
Published Jan 05, 2017
Version 1.0JRahm
Admin
Joined January 20, 2005
JRahm
Admin
Joined January 20, 2005
Carlos_Pesset
Aug 24, 2017Nimbostratus
Thanks for the answer Jason.
I was making a huge confusion between airgap concepts for forwarding ssl intercept traffic and reverse ssl proxy traffic.
For forwarding I believe that yes, both client and server_ssl are needed in the ingress(internal) LTM and a a server_ssl for the egress(external) LTM.
For reverse proxy is just as you explained: ingress(outside) LTM with client_ssl and egress(internal) with server_ssl.
At least this is what I've seen reading some deployment guides. :)