Forum Discussion

Cirrostratus

Jul 11, 2019

F5 as a Proxy

Hello All, I have one simple question, what is needed to set up F5 as a full proxy. I suposed it is done by setting basic settings of virtual server or is there something what is needed to set up ?

Thank you

BIG-IP

security

8 Replies

Stanislas_Piro2
Cumulonimbus
Jul 11, 2019
to configure LTM as a HTTP proxy, look at this article

https://devcentral.f5.com/s/articles/use-f5-ltm-as-http-proxy-1145
f5beginner
Cirrostratus
Jul 12, 2019
Hi Stanislas,

problem is, that I do not have SSL, Forward Proxy license.

Thank you
- Stanislas_Piro2
  Cumulonimbus
  Jul 12, 2019
  as you can see in the article I wrote, you can use proxy without SSL, Forward Proxy license... in this case, BigIP doesn't decrypt TLS connections but accept it.
  - Nicol4s
    Nimbostratus
    Jul 12, 2019
    Hi Stanislas,
    I'm running a cluster w/ TMOS v13 without SSL Forward Proxy license.
    I've followed your article but I end up with the HTTP 503 error in the clients web browser.
    
    However, your configuration works on my 3rd BIG-IP ( VE Lab license with SSL Forward Proxy included )
    
    Any idea ?
    
    Thanks.
SWJO
Cirrostratus
Jul 12, 2019
From my knowledge, in case of Forward proxy.

Forward proxy create SSL by itself and using that SSL Cert on SSL profile.

And that Cert also publish to internal user`s browser.
Evan_Thompson
Cirrus
Jul 12, 2019
Hi

Yes. SSL forward proxy is a bit complicated.
This article might be helpful.
https://devcentral.f5.com/s/articles/ssl-forward-proxy-explained-using-wireshark-34165