Whiteboard Wednesday: SSL Proxy Solutions
In this episode of Whiteboard Wednesday, Jason continues the proxy discussion from last episode with a breakdown of the ProxySSL and SSL Forward Proxy solutions available on the BIG-IP.
Resources
Published Sep 23, 2015
Version 1.0JRahm
Admin
Joined January 20, 2005
JRahm
Admin
Joined January 20, 2005
- Brad_ParkerCirrusIs there any way to do client cert authentication pass though without proxy SSL. ECDHE is becoming more and more required. Especially with iOS 9.
- JRahmAdminComplete SSL passthrough where you simply load balance is possible...unfortunately the proxySSL capability extendng to ECC and the likes is a limitation within the protocols. Alternative to simple load balancing for non RSA key exchange at this point is offload with client auth moved forward from the app to the BIG-IP.
- JRahmAdminadded an annotation to the video as well for the cipher list, either the server or the BIG-IP should be trimming non RSA ciphers for Proxy SSL to work.