SSL passthrough

Hi Akash,

 

 

yes. create a performance L4 type VS and load balance SSL connection without certificate on the F5. The SSL termination will have to be handled by the servers.

 

 

- Santosh.

Santosh is correct. The 'passthrough' just refers to the fact the SSL is passed through the device to the servers, not terminated on the F5. Note that this means you cannot apply iRules, compression and a host of other features and you also lose some flexibility with persistence. In my experience, it's normally worth the time to terminate on the F5 and re-encrypt to the server (if it must be SSL end to end) so you get all of the benefits of LTM but maintain your security.

I don't think you want SSL passthrough, my understanding of that is to be able to pass the ssl handshake down to the web servers, but still maintain decryption at the Big-IP for purposes of inspection like with ASM.

 

 

I think Santosh has the right idea here.

Mike, I may be wrong but I think you're describing ProxySSL, not SSL passthrough.

So I did, sorry about the confusion