SSL Offloading APM 9.50
We want to configure SSL for APM 9.50, We have 2 DPS and 2 Gateway , For users and data collectors we have 2 Loadbalancer VIP.
We have gone through hardening document and for such scenario its recommend to do ssl offloading on LB. But here we are facing issue on LB side and customer is asking us to configure SSL offloading only on gateway servers which is not commanded as per document.
We want to know if we do SSL offloading only on gateway server what could be the impact ? and why it is recommended.
Re: SSL Offloading APM 9.50
Basic concept of SSL Offloading is to free up your web/application servers from getting its resources engaged in encryption and decryption of the data. For this purpose LB offloading comes in place. If you'll do this in GW server, the basic idea of SSL offloading just fails.
I am not sure about major consequences but yes if you do this at LB level than definitely save your GW server resources.