Forum Discussion

Lukes's avatar
Lukes
Icon for Altostratus rankAltostratus
Jun 17, 2020

configure port 443 to use ssl that is installed on Apache or Caddy server

Hi, Trying to open port 443 (https) without offloading ssl cert. If I dont setup any profile the BigIP does not forward traffic to my server. If I setup only server side SSL profile without any cer...
BIG-IP
devops
LTM
ssl
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Jun 18, 2020

Hello   As you are trying to skip ssl offloading on F5 and let server handle SSL handshakes, do not configure http profile, client and Server side SSL profiles on the Virtual Server. In this config, client will do ssl handshakes with actual web-server.

 

Just check settings, if SNAT is required to be enabled. If web-server gateway is not F5, you need to enable SNAT option otherwise it will cause asymmetric routing issue.

 

Hope it helps!

Mayur