What should the BIG-IP Administrator configure to perform SSL offloading when the certificate is already imported on the BIG-IP device?

An HTTP profile controls HTTP traffic behavior such as header manipulation but does not handle SSL certificate binding or TLS termination.

A Client SSL profile on F5 BIG-IP defines the certificate, key, and cipher settings used to terminate SSL/TLS connections coming from clients. By attaching this profile to the virtual server (not an HTTP profile), BIG-IP decrypts incoming HTTPS traffic, offloading that CPU burden from backend servers. The certificate that was imported on the BIG-IP is referenced within this Client SSL profile configuration.

A Server SSL profile is used when BIG-IP needs to re-encrypt traffic toward the backend server (SSL bridging), not for terminating the client-facing SSL session.

Attaching a Server SSL profile to an HTTP profile does not terminate inbound client SSL connections and is not the correct mechanism for SSL offloading.