Forum Discussion

Shaun_Simmons1's avatar
Shaun_Simmons1
Icon for Altostratus rankAltostratus
Jun 17, 2015

LTM - offload and re-passthru problem "443 -> decrypt -> re-encrypt 443"

I have a need to decrypt 443 and re-encrypt to the pool member port 443 ; because I will be apply a "Thin Client Persistence" iRule that will allow the connection to persist at a VIP and bounce the user back to the WIP to pick another Pool member(VIP). But, because the stream is encrypted the LTM cannot manipulate the packets.

 

Current: Client:443 -> VIP passthrough -> Pool Member:443

 

Decrypt Traffic and Re-encrypt to VIP member Client:443 -> VIP(decrypt)iRULE -> SSL profile (encrypt)443 -> Pool Member:443 -This does not work. I also tried to apply a SSL cert with a valid CA cert, but no dice.

 

1 Reply

  • Did you try to configure independent client and server ssl profiles for this virtual server? It should permit you to access and modify the request/response data.