cancel
Showing results for 
Search instead for 
Did you mean: 

SSL Offload

Former Member
0 Kudos

Hi,

Does any know if EP6 SP3 supports SSL Offload, i.e., HW that accepts incoming HTTPS connections and forwards that to the applications servers. In EP5 SP5 this is still not supported as the HTTP entity body does contains absolute HTTP schemes.

Thanks in advance.

Regards

AB

Accepted Solutions (0)

Answers (1)

Answers (1)

Oliver_S
Product and Topic Expert
Product and Topic Expert
0 Kudos

depends on what you mention: Yes.

What is HW? EP60 can forward incoming https connections to application servers in http.

Oliver

Former Member
0 Kudos

Oliver,

This is similar to a question we have been working on at ChevronTexaco.

Specifically, can I offload my SSL processing to a hardware solution (like BIG IP's F5 Load Balancer)? I was told that in EP5-SP4 that this was not supported because there were some areas where the portal would generate incorrect (i.e. insecure http requests) since the portal didn't really know that it should be communicating via SSL.

There was mention that this issue was being worked by SAP in EP6 but it is unclear in which Service Pack this functionality is supported.

Can I take it, that this is delivered in SP3? and that hardware SSL solutions will be supported for use by the portal?

Thanks

Joel Albert

ChevronTexaco

Oliver_S
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi Joel,

This is one of the things that can be done in EP6 SP2, it requires the ability to cause the HW sending some extra header in the request (any header will do - it is then being configured in the portal what header identify such request that came for the HW SSL accelerator).

In SP3, there will be support for identifing by adding an alias to the intial request (e.g. http://server:port/irt/HWSSL)

Ariel and Oliver

Former Member
0 Kudos

I´ve implemented a hardware SSL Offloader for EP 5.0 SP4 for one customer. The solution have been live for one year now and is working fine.

We had some initial trouble for some administration pages (the user management part) that required small changes related to the BASE HREF tag, as well as the SP4 Active-X iViewEditor.

But in the big picture, it works pretty well!

/ Mikael Gurenius

PS. The hardware vendor was SonicWall, can´t remember the product name.