Forum Discussion

Prath1991_30162's avatar
Prath1991_30162
Icon for Nimbostratus rankNimbostratus
Jul 06, 2017

Server ssl profile what it means to backend servers ?

Hi One question keeps botherig me is ,when we use server ssl profile on F5 to re encrypt traffic before sending it to backnend servers ,how does that impact backend server performance ? For eg if 1000 users initiates 1000 sessions to f5 does that mean backend server processes 1000 encrypted sessions ? My application team told me that its not like that, it only sees 1 session from F5 ? All i am trying to understnd is ,if we use server ssl profile i believe we dont essesntially do offloading on F5 as backend servers still need to do all encryption and decryption for all requests.kindly advise if i am wrong.

 

application delivery
BIG-IP
LTM

3 Replies

Sort By
  • nag_54823's avatar
    nag_54823
    Icon for Cirrostratus rankCirrostratus
    Jul 06, 2017

    Hi,

     

    Yes. Serverssl profile will provide feature that we can Offload ssl on server directly. But Why do you need to offload SSL on server when you can perform on LB?

     

    • eben's avatar
      eben
      Icon for Nimbostratus rankNimbostratus
      Jul 06, 2017

      Using the robust ciphers to servers tasks CPU and in turn could reduce response time. I don't think LB can help here. But say for instance you use a lower cipher strength to the backend servers than what you use for clients->f5, you are reduce workloads on the servers and hence the need for offloading. what do you think?

       

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jul 06, 2017

    Hi,

     

    serverssl profile must be configured if back end web server is listening HTTPS.

     

    enabling HTTPS on back end server will increase CPU utilisation on server, but increase security.

     

    I Guess in "it only sees 1 session from F5", you mean 1 connection.

     

    if there is one connection, your VS must have oneconnect profile enabled.