What are the advantages of end to end ssl vs. server term'd ssl

[nygenxny123]

what would be the advantage of having the ACE terminate ssl and than initating an ssl connection to the backend server

instead of just having the server terminate the ssl connection?

we are currently discussing this..and even from a resource perspective...the server would seem to be using

the same amount of resources

[jsirstin · Accepted solution]

The real advantage with end to end SSL is that the ACE can make layer 7 decisions but still keep the traffic encrypted from client to server. This would be the case if you needed to use cookies as the sticky method or make a load balance decision on URL or host header. Most of the time it is financial or government institutions that use this feature to keep the data secure even on the inside of the network.

This is much more resource intensive on the ACE. You are correct about the performance on the server. From the server perspective it would be no different if the ACE just load balanced SSL, or terminated it first then encrypted it going back to the server.

Hope that helps

Best regards

Jim

[nygenxny123]

thank u..

my company wants the most secure method covering every variable..

end to end looks like the answer