Forum Discussion

aaperson_255899's avatar
aaperson_255899
Icon for Nimbostratus rankNimbostratus
Mar 11, 2019
Solved

changing DEFAULT ciphers v14.x

In version 14.x, will be adding ciphers to the DEFAULT ciphers list to give traffic a way to communicate between the F5 LTM and real servers. (Have done the research discovered LTM and real servers w...
application delivery
BIG-IP
ciphers
LTM
performance layer4
ssl
Super-NetOps
version 14.x
  • Jason_Cohen_417's avatar
    Jason_Cohen_417
    Mar 11, 2019

    If you are using a PerfomanceL4/FastL4 Virtual Server, the BIGIP is not communicating TLS with the back end servers. The BIGIP in this case would be passing TCP traffic through from the client directly to the server. The TLS handshake would not involve the BIGIP so any changes to cipher lists on the BIGIP would be irrelevant.

     

Jason_Cohen_417's avatar
Jason_Cohen_417
Historic F5 Account

If you are using a PerfomanceL4/FastL4 Virtual Server, the BIGIP is not communicating TLS with the back end servers. The BIGIP in this case would be passing TCP traffic through from the client directly to the server. The TLS handshake would not involve the BIGIP so any changes to cipher lists on the BIGIP would be irrelevant.