Forum Discussion

Anurag_384242's avatar
Anurag_384242
Icon for Nimbostratus rankNimbostratus
Feb 20, 2019

F5 LB : Decryption and Re-Encryption of Traffic to Application Server

I want to understand how a F5 Load balancer decrypts the SSL traffic received from a client say a browser and then re-encrypts it before sending/forwarding the same to an Application Server in an ent...
BIG-IP
BIG-IP DNS
security
Stephane_Viau's avatar
Stephane_Viau
Icon for Nimbostratus rankNimbostratus
Feb 20, 2019

The client-ssl profile manages the SSL settings between the client and the Big-IP, and the server-ssl profile manages the SSL settings between the Big-IP and the server. The default server-ssl profile ignores SSL certificate warnings, which is why you were able to use a self-signed certificate on your server. You can create a custom server-ssl profile if you wish to accept valid certificates only.