Forum Discussion

minkyu's avatar
minkyu
Icon for Nimbostratus rankNimbostratus
Jul 10, 2017

how to decrypt SSL Traffic with virtual server

hi, i am difficult because i don't know how to decrypt SSL Traffic with virtual server i try that my virtual server client ssl profile has cert, key on specific site. but i see packet with wireshark,...
application delivery
LTM
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jul 10, 2017

Hi,

 

Where you see encrypted traffic - between client and virtual server (VS)? Is so it's as it should be. Only traffic between BIG-IP and backend servers will be decrypted in such case - this is classical SSL Offload scenario:

 

Traffic between client and VS is encrypted using clientssl profile BIG-IP decrypts traffic (so you can inspect it on BIG-IP) Decrypted traffic is send to backend servers (pool members) - so again you can monitor anything here because it's not encrypted.

 

Piotr