For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Denis_9818's avatar
Denis_9818
Icon for Nimbostratus rankNimbostratus
Jun 12, 2009

F5 as a TCP proxy

We'd like to use our F5 as a TCP proxy for a bidirectional traffic flow like this:   Public IP -- DMZ Firewalls ---F5---Private IP (one server).   The reason we'd like to have it this way, ...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 15, 2009
You can configure a virtual server (or less ideally a SNAT) to allow servers "behind" the BIG-IP to access external hosts/networks through the BIG-IP. Normally for outbound access, you'd use a Performance Layer4 virtual server pointing to a pool of firewalls or a Forwarding IP virtual server if you want to use the routing table to select a gateway.

 

 

SOL5017: Overview of virtual server types

 

https://support.f5.com/kb/en-us/solutions/public/5000/000/sol5017.html (Click here)

 

 

Aaron