1

Technically and security wise, can a reverse proxy act as a "container" for SSL certs ? Meaning, for example currently my web server is running on ssl (https). Can I move the SSL cert to the reverse proxy and let it handle SSL connections to the web server. And my web server will revert back to port 80 normal web traffic? thanks

Improve this question
1
  • 1
    Unless you are blocking port 80 traffic other than from the reverse proxy, this is rather dangerous - you are providing an SSLStripping service for your own site. You need to make sure that only the reverse proxy can access the content intended to be protected by SSL. If you are running mixed traffic then keep it on different ports..
    – symcbean
    Oct 21, 2015 at 14:37

1 Answer 1

Reset to default
3

Yes. In fact all big load balancers (eg. F5 Big-IP) work in this mode by default.

Improve this answer
2
  • hi, thanks. Can I confirm with you, the web server do not need to install SSL cert. I will only install the cert on F5 and F5 will take care of it. Right? thanks
    – JinPangPang
    Jul 10, 2015 at 11:21
  • Exactly. Most very big sites works that way.
    – Tomasz Klim
    Jul 10, 2015 at 11:25

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .