For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Andre_Lofton_14's avatar
Andre_Lofton_14
Icon for Nimbostratus rankNimbostratus
Nov 17, 2015

How to configure SSL Pass-through

Currently I have a standard VIP setup using a SSL client profile and SSL server profile. How do I configure it for pass-through?  
application delivery
LTM
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Nov 17, 2015

If you want to still be able to use an HTTP profile you will have to select the Proxy SSL option in both of your profiles. That will also require your pool members to support all the ciphers you make available in the client SSL profile and you will need to disable Diffie-Hellman ciphers. https://support.f5.com/kb/en-us/solutions/public/13000/300/sol13385.html

 

If you don't need to use an HTTP profile you can just remove both of your client and server SSL profiles.

 

Amr_Ali's avatar
Amr_Ali
Icon for MVP rankMVP
May 20, 2023

how we can disable Diffie-Hellman ciphers, for a server-side profile I will create a custom one and attach to it the public certificate and key for the backend server ???!!!!