F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

HTTP 2.0 changes everything

#HTTP #ietf #webperf #infosec Despite the hype and drama surrounding the HTTP 2.0 effort, the latest version of the ubiquitous HTTP protocol is not just a marketing term. It's a real, live IETF st...
Published Jul 10, 2014
Version 1.0
application delivery
http
performance
security
webperf
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Jul 10, 2014
Hi Jeffrey, I've seen a few customers clone traffic and send it unencrypted to an ids system, and I've also seen a couple solutions where they will send unencrypted through an IPS system that then flows back through the BIG-IP to be re-encrypted before sending on it's way. Clever solutions, but if the requirement states no unencrypted traffic on the wire, period, well, both solutions fail that, and there isn't an official best practice stamp on them anyway. If interested: https://devcentral.f5.com/articles/divert-unencrypted-traffic-through-an-ips-with-local-traffic-manager