201 · Question #77
Which is an advantage of terminating SSL communication at the BIGIP rather than the ultimate web server.
The correct answer is A. Terminating SSL at the BIGIP can eliminate SSL processing at the web servers. SSL termination at the BIG-IP offloads computationally intensive decryption from backend web servers, allowing them to focus on application logic.
Question
Which is an advantage of terminating SSL communication at the BIGIP rather than the ultimate web server.
Options
- ATerminating SSL at the BIGIP can eliminate SSL processing at the web servers.
- BTerminating SSL at IP the eliminates BIG all unencrypted traffic from the nternal.network.Terminating SSL at
- CTerminating SSL at the BIGIP eliminates the need to purchase SSL certificates from a certificate authority.
- DTerminating SSL at the BIGIP eliminates the need to use SSL acceleration hardware anywhere in the
How the community answered
(31 responses)- A90% (28)
- C6% (2)
- D3% (1)
Why each option
SSL termination at the BIG-IP offloads computationally intensive decryption from backend web servers, allowing them to focus on application logic.
By terminating SSL at the BIG-IP, the BIG-IP handles the CPU-intensive encryption and decryption, sending unencrypted (or re-encrypted) traffic to the backend web servers, which significantly reduces the processing load on those servers.
Terminating SSL at the BIG-IP does not eliminate all unencrypted traffic from the internal network; traffic between the BIG-IP and web servers might still be unencrypted unless re-encrypted, and other internal network traffic is unaffected.
SSL certificates are still required for the BIG-IP to present to clients, so purchasing certificates from a certificate authority is not eliminated.
The BIG-IP itself often uses SSL acceleration hardware (either built-in or external) to efficiently handle SSL termination, so the need for acceleration hardware is not eliminated but rather centralized.
Concept tested: SSL offloading benefits
Source: https://techdocs.f5.com/en-us/big-ip-15-1-0/big-ip-local-traffic-management-implementations/configuring-ssl-profiles.html
Topics
Community Discussion
No community discussion yet for this question.