SSL offloading configuration 编辑

To configure SSL offloading, you must enable SSL processing on the Citrix ADC appliance and configure an SSL based virtual server. The virtual server will intercept SSL traffic, decrypt the traffic, and forward it to a service that is bound to the virtual server. To secure time-sensitive traffic, such as media streaming, you can configure a DTLS virtual server. To enable SSL offloading, you must import a valid certificate and key and bind the pair to the virtual server.

Note

From release 13.1 build 17.x, protocols lower than TLSv1.2 are disabled on the SSL internal services.

• If the default profile is enabled, ns_default_ssl_profile_internal_frontend_service is bound to the SSL internal services and SSLv3, TLSv1.0, and TLSv1.1 protocols are disabled in this profile.
• If the default profile is not enabled, SSLv3, TLSv1.0, and TLSv1.1 protocols are disabled in the SSL internal services parameters.

Enable SSL

To process SSL traffic, you must enable SSL processing. You can configure SSL based entities, such as virtual servers and services, without enabling SSL processing. However, they do not work until SSL processing is enabled.

Enable SSL processing by using the CLI

At the command prompt, type:

enable ns feature ssl

show ns feature
<!--NeedCopy-->