Forum Discussion

Nfordhk_66801's avatar
Nfordhk_66801
Icon for Nimbostratus rankNimbostratus
Jun 18, 2014
Solved

HTTP Profile breaks HTTPS Connections

Hi,   We want to setup SSL forwarding for our HTTPS virtual server. If I set a no HTTP profile and setup a bypass by selecting none for both client and server SSL the site works properly.   If ...
application delivery
design
http profile
LTM
security
ssl
  • Vincent_96223's avatar
    Vincent_96223
    Jun 18, 2014

    If you are wanting F5 to do a passthru, where your actual servers will be doing the encryption and decryption, select Type = Performance (Layer 4) on your VIP. Now, if you want F5 to do the SSL handshake for you, you will have to create a client side SSL profile on F5, and import your certificate and key onto F5. F5 will represent your server for the SSL session, and you have the option of setting up your backend to either talk HTTP or HTTPS.

     

Vincent_96223's avatar
Vincent_96223
Icon for Cirrus rankCirrus
Jun 18, 2014

Your load balancing option is setup in the pool. So which ever pool you assign to the L4 VIP, go to the members tab, and select your LB method. You can then setup your Default Persistence Profile to 'cookie" in your VIP object under the resource tab.