Know your gear
With the BIG-IP system's SSL forward proxy functionality, you can encrypt all traffic between a client and the BIG-IP system, by using one certificate, and to encrypt all traffic between the BIG-IP system and the server, by using a different certificate. SSL forward proxy functionality supports the server name indication (SNI) extension to transport layer security (TLS).