For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

wowchens's avatar
wowchens
Icon for Nimbostratus rankNimbostratus
Jun 26, 2008

F5 LTM as Reverse Proxy

At one of my clients, I am tasked with setting up a 1500 series LTM as a reverse proxy for all of the company external facing websites. LTM is being looked for less of a load balancing function and mo...
config
design
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 19, 2014

Okay, so given your architecture:

Internet --> Ext FW --> F5 LB doing Proxy --> Int FW --> F5 LB --> Pool Member

I'm guessing that you're terminating SSL at the external LB, re-encrypting, and then decrypting again at the internal LB? In which case your internal FW is simply forwarding SSL traffic? Have you assessed that non-SSL traffic works? Do you see traffic on both sides of both VIPs?

For what it's worth, I wasn't suggesting you remove the external firewall, but rather the one after the proxy LB (internal FW).

Internet --> Ext FW --> F5 LB doing Proxy --> Pool Member