For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

syedimam_147051's avatar
syedimam_147051
Icon for Nimbostratus rankNimbostratus
Feb 24, 2016

Data Group- URL Parsing

Scenario: Data Group 1: URL strings to be forwarded to Proxy 1 Pool

Data Group 2:

URL Strings to be forwarded by F5 as proxy to internet

Data Group 3:

Anything else: goes to Data Proxy 2 Pool

Configuration:

when HTTP_REQUEST {

Proxy-1
    if { [class match [HTTP::host] contains Proxy1-URLs] } {
            pool proxy1-pool
F5 Proxy
    } elseif { [class match [HTTP::host] contains Direct-URLs] } {
            pool Direct-pool
Proxy-2

} else { pool proxy2-pool}

}

Progress: Data Group 1 (Proxy 1) works fine Anything else via Proxy 2 Pool works fine Data Group 2 (F5 acting as proxy): not working

Problem Detail: First I used explicit HTTP profile with VIP and used my firewall IP as DNS resolver. Tried to use F5 as forward proxy for everything direct to internet and worked fine with no pool members and with my firewall IP as pool member

With iRule, I configured my firewall IP as Pool member on port 80, I am grtting prompted for authentication by my internet router. Get request is going to firewall instead of public IP and DNS resolved successfully. Firewall is returing authentication page in return of Get request.

I also tried to change my iRule for F5 proxy section and used to forward to virtual configured for forward proxy on different port and heaving same issue. When I change client browser to use same virtual directly it works fine.

No RepliesBe the first to reply