Forum Discussion

Nimbostratus

Apr 15, 2016

How build a proxy like setup using BIG-IP

Hi all, I am looking for the best (simplest) way to implement the following: Client - - - > F5 VIP - - - > Single server on Internet HTTP HTTPS This look really clo...

Cirrostratus

Apr 19, 2016

Hi Fabou,

You can configure the Big IP to be an explicit proxy and perform SSL inspection via LTM. This means that the client SSL terminates on the Big IP and and "airgap" is created between the SSL of the client and the end server, since the Big IP will create another SSL connection to the external site. I recommend however that you do this in conjunction with the SWG (Secure Web Gateway) URL DB so not to inspect clients private information (financial, health etc.).

F5 has thorough documentation on how to set this up here.

https://www.f5.com/pdf/deployment-guides/ssl-intercept-dg.pdf