Forum Discussion

Luca_55898's avatar
Luca_55898
Icon for Nimbostratus rankNimbostratus
Jul 28, 2012

x-forwarded-for, ok with HTTPS?

Hi,     Can you use the X-Forwarded-For option if the virtual server is a HTTPS server doing SSL   offload?     The virtual server is configured on port 443, with a client SSL cert. T...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Jul 29, 2012
You can if you decrypt the SSL session on the BigIP (SSL Offload) because the BigIP needs the decrypted stream to be able to add content to the headers.

 

 

You then have the option to re-encrypt the traffic between the BigIP and the poolmember itself which you;ll require as your poolmembers are doing SSL as well.

 

 

H