101 · Question #525
A device needs to decrypt traffic and send unencrypted traffic to the web server. Which method should the BIG-IP Administrator use?
The correct answer is C. SSL Termination. SSL Termination is the BIG-IP feature where the load balancer decrypts the client's SSL/TLS session and forwards plaintext HTTP traffic to the backend web server.
Question
A device needs to decrypt traffic and send unencrypted traffic to the web server. Which method should the BIG-IP Administrator use?
Options
- ASSL Optimization
- BSSL Caching
- CSSL Termination
- DSSL Bridging
How the community answered
(27 responses)- A4% (1)
- C93% (25)
- D4% (1)
Why each option
SSL Termination is the BIG-IP feature where the load balancer decrypts the client's SSL/TLS session and forwards plaintext HTTP traffic to the backend web server.
SSL Optimization is a broad marketing term for general TLS performance improvements and does not specifically describe terminating encryption before the backend.
SSL Caching stores session ticket data to accelerate TLS session resumption for returning clients, which is unrelated to whether backend traffic is encrypted or plaintext.
SSL Termination ends the encrypted SSL/TLS session at the BIG-IP, offloading the computationally expensive decryption from backend servers. The BIG-IP then communicates with the web server over unencrypted HTTP on the server-side VLAN, which precisely matches the described requirement of sending unencrypted traffic to the web server.
SSL Bridging decrypts traffic at the BIG-IP but then re-encrypts it before forwarding to the web server, so the backend server still receives encrypted traffic - the opposite of the stated requirement.
Concept tested: F5 BIG-IP SSL Termination vs SSL Bridging
Source: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-local-traffic-management-getting-started-with-ssl-termination.html
Topics
Community Discussion
No community discussion yet for this question.