LTM/APM as a web proxy

Absolutely, and there are currently three options:

• An HTTP forward proxy iRule:

https://devcentral.f5.com/wiki/irules.HTTP-Forward-Proxy-v3-2.ashx

• An HTTP forward proxy iApp:

https://devcentral.f5.com/wiki/iApp.Generic-Forward-Proxy-with-Websense-Filtering-iApp.ashx

• SSL Forward Proxy:

http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-3-0/14.html?sr=32555869

I'd also add that these are forward proxy mechanisms, the typical Squid implementation. As for reverse proxy, the BIG-IP platform IS a reverse proxy, so no special configurations are required.

Kevin, many tanks for this... Will start my reading and testing... Am already using the LTM/APM as a reverse proxy and it works great! :)

Thanks, dg

Kevin,

Again, thanks for this, I used the iApp with great success!! :)

Regards, Danny

Hmm... Looks like when I installed the iApp, a couple of my APM apps started having issues. Not sure, but how would I go about removing the iAPP? Thanks, Danny

In the management GUI, under iApp - Application Services, select the service created with the iApp template and click delete. Can you elaborate on the issues you saw?

What i have setup is a reverse proxy to a couple of sharepoint systems. I use a webtop to present a couple of buttons and that has been working just fine. After I installed the iAPP, the webtop continued to work, but the SP applications behind the webtop would fail with a "server unable to process request" or some such message. Not really sure what was failing, just lucky that I had not synced over the changes and was able to bring up the standby unit.. I did notice that the traffic group on the changed LTM was changed with added entries for the local proxy. Not sure what else might have changed, just comparing the configs at the moment.. Thoughts?

Thanks, Danny

Depending on how you had it configured, the iApp-based forward proxy is explicit (you have to specify it in the browser proxy settings). At a minimum it configures an iRule, a DNS lookup source, and a VIP. How did you configure it?