When SSL Acceleration is enabled on a Virtual Service, requests from clients will be sent to the Virtual Service encrypted. The LoadMaster will then decrypt the traffic and traffic from the Virtual Service to the Real Server will be unencrypted.
When the re-encrypt option is checked – requests from clients will be sent to the Virtual Service encrypted. The LoadMaster will then decrypt the traffic, so that we can see the Layer 7 information. The LoadMaster will then re-encrypt the traffic before sending it to the Real Server.
To enable the SSL re-encryption, follow the steps below in the LoadMaster Web User Interface (WUI):
- In the main menu, select Virtual Services > View/Modify Services.
- Click the Modify button on the relevant Virtual Service.
- Expand the SSL Properties section.
- Ensure that the Enabled check box is selected.
- Select the Reencrypt check box.
The Reencrypt option should be selected if the you want to have encrypted traffic from the client to the LoadMaster and from the LoadMaster to the Real Server, but enable the LoadMaster to view the Layer 7 information in the packet.