Forum Discussion

Matt_35400's avatar
Matt_35400
Icon for Nimbostratus rankNimbostratus
Sep 16, 2007

SSL transparnecy

Hi All,     I was wondering if it is possible to configure Big IP in the following way?     2 or more web servers with SSL. 2 Big IP in failover, with 1 VIP for web servers. The client con...
dev
devops
iControl
Joe_Pruitt's avatar
Joe_Pruitt
Sep 17, 2007
You can absolutely have BIG-IP just do the load balancing without ssl offload. The only issue is that you will lose any sort of content inspection (ie, the BIG-IP will not be able to see any HTTP headers/cookies/payload/etc). So if you want to do custom persistence, routing, or redirection based the URI/hostname/cookies/form parameters/etc) you'll be out of luck. You have to be able to decrypt the traffic to be able to look inside of it.

 

 

-Joe