Forum Discussion

Cirrus

Aug 19, 2019

Solved

LTM (VIP on Port 443 and Backend Server on Port 80)

Hi Team, Can we terminate traffic on F5 LTM VIP on port 443 and in same setup backend members can be configured on port 80. Regards, ShashankS

Lee_Sutcliffe
Aug 19, 2019
Yes this is possible and a common configuration.
If you want to terminate SSL on the VIP make sure you have an HTTP profile and a client SSL profile.
You do not need to do anything special for HTTP to the backend, just add the TCP/80 pool members to your pool as normal.

Nacreous

Yes this is possible and a common configuration.

If you want to terminate SSL on the VIP make sure you have an HTTP profile and a client SSL profile.

You do not need to do anything special for HTTP to the backend, just add the TCP/80 pool members to your pool as normal.

Cirrus

Aug 19, 2019

Thanks Lee, so do i need to have any special HTTP profile or just default one we can use.

Regards,

ShashankS

Lee_Sutcliffe
Nacreous
Aug 19, 2019
You can use the default one but I would always advise creating a new one using the default ‘http’ profile as a parent, even if you don’t add any additional settings.

That way, if you need to change it in the future, you don’t affect other VIPs that use the same profile.
RAQS
Cirrus
Aug 19, 2019
Thanks lee. Also, if possible can you please guide me in what all scenarios we use http profile ? If possible, please explain any use case. Really appreciate your time and help Regards, ShashankS
Lee_Sutcliffe
Nacreous
Aug 19, 2019
You use an HTTP profile when you process HTTP traffic and want to put the VIP in full layer 7 (OSI) mode.
This allows you, if you wanted, to intercept HTTP requests and responses and perform an action on them.
Min your case, it is needed to terminate SSL