201 · Question #268
You need to terminate client SSL traffic at the BIG-IP and also to persist client traffic to the same pool member based on a BIG IP supplied cookie. Which four are profiles that would normally be…
The correct answer is A. TCP B. HTTP D. ClientSSL F. CookieBased Persistence. To terminate client SSL traffic at the BIG-IP and maintain persistence with a BIG-IP-supplied cookie, the virtual server requires TCP, HTTP, ClientSSL, and Cookie persistence profiles.
Question
You need to terminate client SSL traffic at the BIG-IP and also to persist client traffic to the same pool member based on a BIG IP supplied cookie. Which four are profiles that would normally be included in the virtual server's definition? (Choose four.)
Options
- ATCP
- BHTTP
- CHTTPS
- DClientSSL
- EServerSSL
- FCookieBased Persistence
How the community answered
(50 responses)- A72% (36)
- C8% (4)
- E20% (10)
Why each option
To terminate client SSL traffic at the BIG-IP and maintain persistence with a BIG-IP-supplied cookie, the virtual server requires TCP, HTTP, ClientSSL, and Cookie persistence profiles.
The TCP profile is essential for managing the underlying TCP connections, providing optimization and fundamental network layer control for all TCP-based traffic.
The HTTP profile is necessary to allow the BIG-IP to understand, parse, and manipulate HTTP traffic, which is required for inserting cookies for persistence and other HTTP-specific processing.
HTTPS is a protocol, not a configurable profile type on BIG-IP; its functionality is achieved by combining a ClientSSL profile with an HTTP profile.
The ClientSSL profile is explicitly required to perform SSL offloading, decrypting client-side encrypted traffic and terminating the client's secure connection at the BIG-IP.
A ServerSSL profile is only used when the BIG-IP needs to re-encrypt traffic before sending it to the backend servers, which is not a stated requirement for this scenario.
The Cookie persistence profile ensures that client requests are consistently directed to the same backend pool member by inserting and managing BIG-IP-generated HTTP cookies.
Concept tested: BIG-IP virtual server SSL offload and cookie persistence profiles
Source: https://my.f5.com/manage/s/article/K14175
Topics
Community Discussion
No community discussion yet for this question.