Forum Discussion

minkyu's avatar
minkyu
Icon for Nimbostratus rankNimbostratus
Jul 10, 2017

how to decrypt SSL Traffic with virtual server

hi, i am difficult because i don't know how to decrypt SSL Traffic with virtual server i try that my virtual server client ssl profile has cert, key on specific site. but i see packet with wireshark, encrypted data. please give me suggestion. thank you for reading my question.

 

2 Replies

  • Hi,

     

    Where you see encrypted traffic - between client and virtual server (VS)? Is so it's as it should be. Only traffic between BIG-IP and backend servers will be decrypted in such case - this is classical SSL Offload scenario:

     

    Traffic between client and VS is encrypted using clientssl profile BIG-IP decrypts traffic (so you can inspect it on BIG-IP) Decrypted traffic is send to backend servers (pool members) - so again you can monitor anything here because it's not encrypted.

     

    Piotr