Thanks for the reply Gilles.
But, we are only load balancing the SSL traffic as per below config. Do I have to configure Back-End SSL Server service or a SSL Initiation service, ssl-proxy lists and so on?
In other words, do I have to be be terminating and/or initiating SSL or can I just do the: "keepalive http non-persistent encrypt" with my "keepalive method ?" and "keepalive uri ?" under my "service Webx"?
Config for SSL FARM:
owner FARM1
content WEBSERVERS
add service Web1
add service Web2
add service Web3
vip address w.x.y.z
application ssl
protocol tcp
port 443
url "/*"
balance aca
add service Web4
add service Web5
sticky-inact-timeout 20
advanced-balance sticky-srcip
add service Web7
add service Web8
add service Web9
add service Web13
active
service Web1
ip address w.x.y.z
protocol tcp
port 443
keepalive type script ap-kal-ssl "w.x.y.z"
active
service Web13
ip address w.x.y.z
protocol tcp
port 443
keepalive type script ap-kal-ssl "w.x.y.z"
active
service Web2
ip address w.x.y.z
protocol tcp
port 443
keepalive type script ap-kal-ssl "w.x.y.z"
active
service Web3
ip address w.x.y.z
protocol tcp
port 443
keepalive type script ap-kal-ssl "w.x.y.z"
active
service Web4
ip address w.x.y.z
protocol tcp
port 443
keepalive type script ap-kal-ssl "w.x.y.z"
active
service Web5
ip address w.x.y.z
protocol tcp
port 443
keepalive type script ap-kal-ssl "w.x.y.z"
active
service Web7
ip address w.x.y.z
protocol tcp
port 443
keepalive type script ap-kal-ssl "w.x.y.z"
active
service Web8
ip address w.x.y.z
protocol tcp
port 443
keepalive type script ap-kal-ssl "w.x.y.z"
active
service Web9
ip address w.x.y.z
protocol tcp
port 443
keepalive type script ap-kal-ssl "w.x.y.z"
active
