Forum Discussion
Sachin_Dixit_13
Nimbostratus
Mar 03, 2014Integration of reverse proxy with Squid proxy
Hello Aron,
I want to integate F5 LTM VE 11.3.0 with squid proxy server wherein end user will hit https://abc.123.com. We have certificate for 123.com which is getting offloaded at F5. End user ...
Mar 04, 2014
Hi Sachin!
From your description you basically want to bounce connections from external users via your load balancer to an external website.
If this is the case you need to:
Create a pool and add the IP (or IP's if you will) of the external site as a member.
Create an iRule for host header rewriting:
when HTTP_REQUEST {
[HTTP::host] "xyz.456.com"
}
Create a VIP with:
- HTTP profile
- Client SSL profile
- Server SSL profile
- SNAT pool, or SNAT (you can use SNAT automap for this, or create a new pool). Note that if your F5 is not located on the internet you will need to NAT the request sent by the F5 to a public IP before leaving your network. The SNAT pool settings is located under "Source Address Translation" when creating the VIP.
- If the external site has multiple IP's you need to add a persistence profile too.
- Assign the pool you created as default pool.
- Assign the iRule you created.
Then open the firewall and add any internal to public NAT's you need.
Good luck!
/Patrik
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects