For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Javier_Somoza_3's avatar
Javier_Somoza_3
Icon for Nimbostratus rankNimbostratus
Jul 21, 2017

BIGIP as Reverse Proxy

Hi all   Im trying to configure a virtual server to act as a reverse proxy so I can replace a TMG. It would proxy for some internal sites.   The goal is the following:   External Name: publi...
application delivery
LTM
reverse proxy
Javier_Somoza_3's avatar
Javier_Somoza_3
Icon for Nimbostratus rankNimbostratus
Jul 24, 2017

Ok, seems that using the "Disable - Server SSL" in the local traffic policy list and forwarding to node "IP:80" works to disable SSL internal connections.

 

The last thing i need is performing filtering based on the client source IP/network. I'll try to investigate it later...

 

Javier_Somoza_3's avatar
Javier_Somoza_3
Icon for Nimbostratus rankNimbostratus
Jul 24, 2017

Thanks AMG!

Ok, Im selecting the backend server by using a local traffic policy list based on the Host header and URL path.

But I need internal SSL traffic for some backends and non-SSL traffic for others. If I remove the SSL profile it affects all of them given that im using a single virtual server for many published webs.