Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have applications that make HTTPS connections to other servers. Is it possible to somehow use Big-IP so that if the servers request a client certificate Big-IP will add it in? Or can the applications make a regular HTTP request to Big-IP and then Big-IP makes the SSL connection out and adds a client certificate if needed?

share|improve this question
up vote 0 down vote accepted

Yes, it possible to do both of these.

You can configure the SSL connections between the Big-IP and servers with the server ssl profile. It sounds like you would want to specify a certificate (and key) value in the profile that the Big-IP would present to the servers.

Server ssl profiles and Client ssl profiles are configured separately, so it is possible to use regular HTTP (Client SSL profile set to "none") between your application and the load-balancer, and then HTTPS (w/ client certificate) to the servers.

I suggest looking through the SSL section of the BigIP manual: for more information.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.