Forum Discussion

StephenB_243071's avatar
StephenB_243071
Icon for Nimbostratus rankNimbostratus
Sep 29, 2016

HTTPS to HTTP

Hi,

 

Im attempting to forward https requests to http.

 

I'm running BIG-IP v12.1.1 (Build 0.0.184) Virtual edition.

 

Currently if I access the server directly everything responds as expected. How does one setup the virtual server ?

 

At the moment the Virtual server is setup to listen on port 443 and the node is set to port 80. To get any response from the server i have had to add clientssl-insecure-compatible.

 

1.1.1.1/sap/bpc/web/ is the url.

 

4 Replies

  • Are you wanting to SSL Offload on the F5 ?

     

    You'll need a client SSL Profile likely with CERT + Key combo.

     

  • If I understand you question correctly you want to use SSL Offloading. So speak encrypted to the client but plaintext to the server. In this case you need to assign a client-ssl profile, but no server-ssl profile. Afaik there is no client-ssl-incompatible per default. The client-ssl profile is used for the VS, where the client connection is terminated. So the client-ssl profile is the one, which uses the cert-key pair.

     

    If this is not what you have expected, please provide more information. What is the reponse of the BIG-IP, when you access the VS?

     

    Greets, svs

     

  • Terminate SSL on the F5 and send unencrypted traffic to the pool members listening on port 80.