For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

scalincon_15393's avatar
scalincon_15393
Icon for Nimbostratus rankNimbostratus
May 16, 2014

forward proxy to allow HTTP CONNECT

Hello,

 

Is there anyway to configure a Virtual Server to function as a Forward Proxy? Specifically, we want to allow "HTTP CONNECT" on this virtual server.

 

Client -> port 80 -> F5 (HTTP CONNECT) -> Port 8080 -> Application Server

 

Does anybody know if this is possible? We've looked high and low on google and the F5 developer form, but have not come across anything that will work

 

Cheers, sc

 

8 Replies

    • Robert_47833's avatar
      Robert_47833
      Icon for Altostratus rankAltostratus
      Jul 20, 2015
      I am curious how to implement explict profile in ltm && apm. Now I try to set one vip in ltm as a http/https proxy. need your help, Nitass
    • Robert_47833's avatar
      Robert_47833
      Icon for Altostratus rankAltostratus
      Jul 20, 2015
      I am curious how to implement explict profile in ltm && apm. Now I try to set one vip in ltm as a http/https proxy. need your help, Nitass
  • Smithy's avatar
    Smithy
    Icon for Cirrostratus rankCirrostratus
    Oct 17, 2014

    I've written an iApp to utilise the new Explicit HTTP Profile in 11.5 - https://devcentral.f5.com/wiki/iApp.Explicit-Proxy.ashx

     

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Jul 20, 2015

    I am curious how to implement explict profile in ltm && apm. Now I try to set one vip in ltm as a http/https proxy.

     

    Robert, I see that you've posted a few questions recently, one about 2-factor auth, another about using a portal, and now this. Are these all related? Can you elaborate on what you're trying to do?

     

    APM portal mode is a reverse proxy function that encapsulates internal applications inside a single external namespace. When you mention "explicit" I have to assume you're referring to a forward proxy use case, where you want to control outbound access to the Internet. Technically speaking, the basic forward proxy functions are built into LTM in 11.4 and above. You have a few options, including explicit mode, where the client must enter a proxy address into their browser, transparent mode, where the BIG-IP becomes the client's default outbound route, and variations of each of these. In either case, HTTP and HTTPS can be handled seamlessly. If you want advanced control over outbound access, then the Secure Web Gateway, a separately licensed function of APM can provide secure screening of that traffic. You don't need an iRule anymore to do forward proxy.

     

  • tache_239024's avatar
    tache_239024
    Icon for Nimbostratus rankNimbostratus
    Dec 10, 2015

    Hello,

     

    Can you please let me know if I real need a DNS server for connection that come from Internet to the node that I have already defined in the Pool asigned to Virtual server? I want to mention that the clients from Internet rersolve the name of Virtual server.

     

    Thank you,