NimbostratusHi, I client asked me about if it is possible to balancing https traffic without decrypt the packets in our F5. He doesn´t want our F5 open his packets. Is it possible send https traffic directly to his servers? My F5 is a big-ip 4000
Thanks
Matias
CirrocumulusYes, just don't add any clientssl or serverssl profile to the virtual server. The SSL handshake, encryption, and decryption will be handled by client and server.
Don't forget that as you are not able to see the HTTP payload, you can't add a HTTP profile to the virtual server, neither you can use cookie persistence for example.
AltostratusSure. If you need to proxy TCP then a standard virtual server will do the trick.
If no tcp proxying is needed, use a FastL4 profile, where only destination (and possibly source) address and ports are changed by the F5.
//Jan