Forum Discussion

Mayank_Shukla's avatar
Mayank_Shukla
Icon for Altostratus rankAltostratus
Apr 19, 2016

end to end ssl

do we need to install ssl cert on both LB and real server for features like x-forwarded-for and irules(modifying http behavior) to work for an https VIP? Please explain briefly.  
application delivery
BIG-IP
LTM
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Apr 19, 2016

Answer yes, installing a certificate on BigIP is mandatory for the features you mentioned.

 

Installing a certificate on web-server is only mandatory if you forward connections to SSL-enabled port. Other than that, F5 can also forward connections to plain-HTTP port. In such case, you do not need to install certificate on web-server.