Forum Discussion

Denis_9818's avatar
Denis_9818
Icon for Nimbostratus rankNimbostratus
Jun 12, 2009

F5 as a TCP proxy

We'd like to use our F5 as a TCP proxy for a bidirectional traffic flow like this:

 

Public IP -- DMZ Firewalls ---F5---Private IP (one server).

 

The reason we'd like to have it this way, is because our security policy requires all incoming connections to be proxied.

 

For incoming connections, the inside server will be NATed on the firewalls.

 

What kind of setup can we have on F5 to support outbound connections, acting like a TCP proxy?

 

Thanks.
config
design

1 Reply

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jun 15, 2009
    You can configure a virtual server (or less ideally a SNAT) to allow servers "behind" the BIG-IP to access external hosts/networks through the BIG-IP. Normally for outbound access, you'd use a Performance Layer4 virtual server pointing to a pool of firewalls or a Forwarding IP virtual server if you want to use the routing table to select a gateway.

     

     

    SOL5017: Overview of virtual server types

     

    https://support.f5.com/kb/en-us/solutions/public/5000/000/sol5017.html (Click here)

     

     

    Aaron