BigIP act as web Forward proxy without SWG.

Hi,

 

I saw many topics about proxying with BigIP. I tried the irule from https://devcentral.f5.com/codeshare/http-forward-proxy-v32. I test it and it's working properly.

 

Unfortunatly, I didn't figure out howto implementing properly the filtring of destination domain base on the source network like squid does ("acl dstdomain" and "acl src"). I need it because I want to only let servers (proxy client) access web for download there patches and upgrades (Windows update, Vmware Updates, Linux updates... etc.).

 

Is somebody successfuly implement a flitering irule with forward proxy? If so, can you share your irule?

 

Stephane Labonte