Forum Discussion

nicolas_67135's avatar
nicolas_67135
Icon for Nimbostratus rankNimbostratus
Sep 07, 2011

F5 as a proxy to encapsulate every HTTP session into ssl

Hi,     We have a specific architecture and we want to use the F5 as a proxy device, a specific proxy device...     I explain :   We have a lot of customers in Internet (several hundre...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Sep 07, 2011
is it similar to this? 

[root@Edelweiss:Active] config  b route list
route default inet {
   gateway 172.28.17.254
}
[root@Edelweiss:Active] config  b virtual bar list
virtual bar {
   translate address enable
   translate service enable
   snat automap
   destination any:any
   mask 0.0.0.0
   ip protocol tcp
   rules myrule
   profiles {
      serverssl {
         serverside
      }
      tcp {}
   }
}
[root@Edelweiss:Active] config  b rule myrule list
rule myrule {
   when CLIENT_ACCEPTED {
        node [IP::local_addr] 443
}
}

 curl -I http://209.85.175.103/
HTTP/1.1 200 OK
Date: Wed, 07 Sep 2011 16:32:52 GMT
Expires: -1
Cache-Control: private, max-age=0
Content-Type: text/html; charset=ISO-8859-1
Server: gws
X-XSS-Protection: 1; mode=block
Transfer-Encoding: chunked

[root@Edelweiss:Active] config  tcpdump -nni 0.0 'tcp[13] = 2'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on 0.0, link-type EN10MB (Ethernet), capture size 108 bytes
09:32:30.438210 IP 10.10.72.30.38683 > 209.85.175.103.80: S 1386918676:1386918676(0) win 5840 
09:32:30.440113 IP 172.28.17.70.38683 > 209.85.175.103.443: S 3298992726:3298992726(0) win 4380