
Chapter 4: Configuring the High-Level Network
4-90
Configuring SSL-to-Server
Once the SSL Accelerator proxy has decrypted a client request, you might
want the BIG-IP to re-encrypt that request before it sends the request to the
server, to maintain server-side security. This feature is known as
SSL-to-Server. To implement this feature, you can use either the
Configuration utility or the command line.
Note
The SSL-to-server feature requires that you create an SSL proxy, described
in Creating an SSL Accelerator Proxy, on page 4-88.
Enabling the SSL-to-Server option
You can configure SSL-to-Server using either the Configuration utility or
the command line.
To configure SSL-to-Server using the Configuration utility
1. In the navigation pane, click Proxies.
The Proxies screen opens.
2. Click the ADD button.
The Add Proxy screen opens.
3. In the Proxy Type box, check the boxes labeled SSL and
ServerSSL.
4. Configure the remaining attributes that you want to use with the
SSL proxy and the SSL-toServer feature.
To configure SSL-to-Server from the command line
Use a command such as in the following example to create an SSL-to-server
proxy:
b proxy 10.1.1.1:443 \
target virtual 20.1.1.10:443 \
clientssl enable \
clientssl key my.server.net.key \
clientssl cert my.server.net.crt \
serverssl enable
You must either configure trusted server-side Certificate Authorities or
configure the SSL proxy to ignore server-side certificates. For more
information, see Configuring server certificate authentication, on page
4-92.
Kommentare zu diesen Handbüchern