Ssl – F5 Big-IP and WSS WebSockets

f5-big-ipsocketsslwss

We have a F5 Big-IP load balancer that handles the SSL, so the servers behind it get HTTPS rather than HTTP (SSL off loading). I don't have version handy, but in the login page I can see "Copyright 1996-2010", so I guess it is not latest version 🙂

How will that schema work with WS and WSS? Will the WSS handshake hit the load balancer, and then be forwarded as WS handshake to the web server?

Thanks.

Best Answer

On a version of F5 BigIP that old, you will need to do some tricks, as you can't use an HTTP profile and thus not use any fancy F5 HTTP tricks. As of version 11.4 you can use an HTTP profile and still have working websockets. For more info I'd refer you to this article on the F5 knowledge base and the articles it links to.