For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Wasfi_182818's avatar
Wasfi_182818
Icon for Altostratus rankAltostratus
Nov 08, 2016

Load balancing two explicit forward proxies

Hi;   Is there a document which elaborates on the best practice F5 configuration for load balancing two explicit forward proxy devices for http/https traffic.   Kindly Wasfi  
application delivery
BIG-IP
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Nov 08, 2016

Hi Wasfi,

 

there are unfortunately no helpful documents available.

 

My best advice is to use a simple Layer4 Virtual Server with "Least Connection" balancing and SRC_IP persistence or using a CARP-based persistence/balancing based on the Source_IP address of the client to not split the connections of a single client through multiple proxy servers.

 

Using CARP based on the requested ressource does unfortunately have serious limitations (as already mentioned in your other post)...

 

https://devcentral.f5.com/questions/how-to-load-balance-two-forward-proxy-servers-that-are-not-transparent-49684

 

Note: You could also implement a client side CARP-Algorythm using the old fashioned Super Proxy Script written by Sharp back in the 90th.

 

http://archive.is/fd8PE

 

Cheers, Kai