Forum Discussion
ICAP inspection with SWG for HTTP and HTTPS
- Jun 24, 2015
I've found that the HTTP VS generally never receives any traffic when using the explicit proxy, probably because most clients don't use the HTTP CONNECT method for unencrypted requests. Meaning that the HTTP proxy won't be triggered and the traffic will just be forwarded out the default route on your BIG-IP.
I ran into this issue when trying to enable AAM on the proxy_vs, and worked around it using this iRule:
when HTTP_PROXY_REQUEST { traffic passed through to the HTTPS VS where web acceleration is enabled WAM::disable } when HTTP_REQUEST { web acceleration enabled non-proxy HTTP requests WAM::enable }
I don't know if there's an equivalent command to enable/disable ICAP.
Ivan,
I am curious, what type of ICAP server are you using here? Typically, you would not want to send all the traffic to the ICAP server but rather use BIG-IP to intelligently steer required data(like POST requests, for example) to the ICAP. I'm curious what the use case is for sending all request data via ICAP and what purpose it will serve. Thanks.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com