For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cakriwut's avatar
cakriwut
Icon for Nimbostratus rankNimbostratus
Jan 24, 2020
Solved

Need help - Configure forwarding proxy chain

Hi team,   Initially I have configured forward proxy without any issue: Client (Intranet) -> F5 (explicit-http) -> INTERNET   Now, we want to put proxy pool between F5 and INTERNET li...
AAM
application delivery
LTM
  • nathe's avatar
    nathe
    Jan 24, 2020

    Have you seen this iApp? May identify any misconfiguration. Of course you may not need to go down the route of 0365 bypass though.

cakriwut's avatar
cakriwut
Icon for Nimbostratus rankNimbostratus
Jan 26, 2020

  thanks, you are saving my day.

For others who has same difficulties, here are the key moving part to create load balance forward proxy chain.

  1. Create Pool of forward proxy, that will actually connect to internet.
  2. Create DNS Resolver
  3. Create tcp-forward tunnel
  4. Create http-explicit service profile (bind DNS resolver, tcp-forward tunnel, disable one connect transformation, enable default connect handling)
  5. Create iRule that will disable HTTP::proxy , and direct to Pool of forward proxy.

 

Apparently my initial configuration was missing step-4 (disable one connect transformation) and step-5 irule.

Hence the principle to achieve forward proxy chain are:

  1. Create http-explicit VS for the proxy endpoint
  2. Using iRule to internally change the processing into Reverse proxy.

 

Thanks,

 

Riwut

 

 

chomjosh's avatar
chomjosh
Icon for Nimbostratus rankNimbostratus
Jul 17, 2023

Thanks for this straight forward contribution to this issue. It solved my problem 100%. Great job! This should be voted BEST!