Is SSL offloading supported by ITMS?

book

Article ID: 150683

calendar_today

Updated On:

Products

Management Platform (Formerly known as Notification Server)

Issue/Introduction

Question:

The customer wants to know if we support SSL Offloading. He described his set up as thus: 

  • Setup HTTPS on the Citrix Netscaler but it talks to the SMP via HTTP

  • Client –(HTTPS) -->Citrix--(HTTP) -->SMP

Resolution


Answer:

Currently (as ITMS 8.1 release) No, we do not support SSL offloading officially. We never tested it neither with Citrix nor other devices as F5. 

This feature is more usable for real high end traditional web servers hosted for big loads.

SSL offloading is the process of removing the SSL-based encryption from incoming traffic to relieve a web server of the processing burden of decrypting and/or encrypting traffic sent via SSL. The processing is offloaded to a separate device designed specifically for SSL acceleration or SSL termination.
SSL termination is particularly useful when used with clusters of SSL VPNs, because it greatly increases the number of connections a cluster can handle.