Hacker News new | past | comments | ask | show | jobs | submit login

F5 Big-IP devices are the market leader in commercial load balancing appliances. I think you rather underestimate the impact. I'm not making any judgement on the branding, there are pros and cons to this approach, but it's certainly something that's going to cause a lot of people pain.



In the Alexa top 1M there were less than 1000 sites.

And sites smaller than that top 1M are even less likely to be using it.

I don't find that a very large impact personally. F5 knows who their customers are and can easily contact them.

We don't need a big media panic blitz and dedicated domain name for this.

Fact of the matter is SSL accelerators just aren't all that popular now, SSL got cheaper with session resumption and newer ciphers, CPUs got fast and accelerated instructions for AES and all but a few people just use CDNs when their needs go beyond that.


These days, the F5 is valued more for it's intelligent load balancing than for the SSL offload. The SSL termination is there more for being able to view the request details / payload (for load balancing, app level routing, credit card tokenization, etc) than to specifically offload the crypto work. It's fairly common, in fact, for the downstream services to also be SSL.


Old article from 2003:

http://www.bus.umich.edu/KresgePublic/Journals/Gartner/resea...

I wonder how many of these are/were TLS version or extension intolerant.


These days? I think it would be AWS ELBs, surely?


Some people understandably want to do things on-premise, to avoid shipping unnecessary details to companies like Amazon. But for the most part a reverse proxy using varnish or nginx will do the job here. Heck, I think even CloudFlare uses modified nginx.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: