Forum Discussion

helenio's avatar
helenio
Icon for Nimbostratus rankNimbostratus
Jul 03, 2014

Load balance HTTPS traffic without SSL decription

Hello,

 

may I load balance HTTPS traffic toward HTTPS Servers with SSL (all server have the same certificate). Actually I like that LTM does only Layer 4 load balancer without any SSL operation. Encryption offload is done by the server on the pool.

 

May also insert cookie for persistence ?

 

3 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus

    You would need to terminate the SSL Connection in order to utilise layer7 persistence i.e. using cookies.

     

    As you mention, the BIG-IP does not have to terminate the SSL traffic and can simply deliver the traffic to the backend pool members as is.

     

    If you need any layer7 capabilities but don't wish to terminate the SSL connection on the BIG-IP then you could use the Proxy SSL feature of the client/server SSL profiles.

     

    Hope this helps,

     

    N

     

  • One more doubt on this query

     

    can the Irule will work effectively for Https pool if we do not configure SSL certificate on the LB?