Load Balancing SSL LDAP requests

You don't necessarily need a cert on the backend, unless you're going to re-encrypt the traffic between the F5 and the server. (You could just run plain text, but would need to translate any redirects from ldap:// to ldaps://

 

 

If you are going to re-encrypt, you could just use a self signed cert on the ldap server itself. The F5 won't care. And it'll save you the money.

 

 

 

H