F5 SSL - dont need SSL in apache?

Nate Klingenstein ndk at internet2.edu
Mon Aug 1 07:49:06 BST 2011


Tim,

Apache on each node needs to be configured to answer as if it were the  
externally-facing interface.  It won't be doing the SSL negotiation  
itself.  This article should help.  If it leaves you with questions,  
let us know.

https://wiki.shibboleth.net/confluence/display/SHIB2/SPReverseProxy

Take care,
Nate.

On Aug 1, 2011, at 5:37 , Tim O'Connor wrote:

> Hi all - we are implementing a load balanced Shib install behind an  
> F5.  If we are doing SSL in the F5, do we still need to do it in  
> apache on each node?
>
> The build guide I have from the Australian Access Federation lists  
> both steps...
>
> Thanks.



More information about the users mailing list