F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

SamQ_140563's avatar
SamQ_140563
Icon for Nimbostratus rankNimbostratus
Dec 31, 2013

Load Balance Office 365 URLs

Dear Professionals,

 

My company requirement is to send office 365 email through separate ISP link, I have Microsoft cloud URLs list,

 

I have two proxy servers behind LTM, i need to create IRule so that if it find Microsoft URLs it should send to proxy 1 and rest of all should send to proxy server 2, my doubt is on https traffic, i just need to forward traffic based on URLs do i need to add client side certificate,

 

Regards, Sameer Q

 

application delivery
cloud
design
devops
iRules
microsoft

1 Reply

  • mikeshimkus_111's avatar
    mikeshimkus_111
    Historic F5 Account
    Dec 31, 2013

    Hi Sameer, which version of BIG-IP are you running? In v11.3 and above, the SSL Forward Proxy feature will let you decrypt outbound SSL traffic, assuming you have installed a cert/key from a trusted internal CA on your LTM, and configured it in the SSL Forward Proxy options of the client SSL profile on the outbound virtual server. There's a beta iApp for this here: https://devcentral.f5.com/wiki/iApp.SSL-forward-proxy-with-web-acceleration-iApp-template.ashx

    That iApp only allows for one pool of routers, so you would still need to add an iRule to forward the Office 365 traffic to a different pool. Something like:

    when HTTP_REQUEST {
    if { [string tolower [HTTP::uri]] contains "microsoftonline" } {
        pool o365_pool
    }
}