SSL pass-through

For TCP-based routing (layer 4) configurations, the LB should be configured in SSL pass-through mode.

In SSL pass-through mode, HTTPS communication is not terminated by the LB, but rather passes through and is terminated only by the Mobile Gateway servers.

Such configurations do not require deploying server certificate on the LB, nor defining client or server SSL/TLS profiles.

In such deployments, the TLS certificates on the Mobile Gateway servers need to have, in addition to the specific Mobile Gateway server name, also the address of the Load Balancer in their Subject Alternative Name (SAN) field.