why can't we use Performance L4 VS for SSL bridging .

Hi Sajan

SSL/TLS sits "on top" of TCP. And FastL4 vs takes care only of the connection part of TCP. Not layers above. That's why.

If you need more perf (and less control over L7 layer) you could use Performance HTTP.

Any precision required let us know...

Yoann

Hi Sajan,

the reason for this is, that just the Standard Virtual Server is able to establish two independend TCP sessions (client / server side) to negotiate the SSL/TLS channels on each of the sides correctly. A Performance L4 Virtual uses just one TCP session in pass-through mode...

K12015: Configuration requirements for SSL virtual servers, profiles, pools, and monitors

https://support.f5.com/csp/article/K12015

K8082: Overview of TCP connection setup for BIG-IP LTM virtual server types

https://support.f5.com/csp/article/K8082

Cheers, Kai