Forum Discussion
hc_andy_35682
Mar 22, 2010Nimbostratus
OneConnect and Proxy/Squid Load Balancing
Hi All,
We provide proxy services (http/https) to a large number of schools (each with their own static IP). Each school can have 1000's of connections to the virtual server at any time...
mikand_61525
Jan 03, 2012Nimbostratus
I just read http://www.f5.com/pdf/deployment-guides/oneconnect-tuning-dg.pdf and by just looking at the graphs it looks impressive but how will oneconnect work in real life regarding a forward http proxy such as squid (thinking of using 11.x of LTM)?
And do someone have some kind of "recommended" values thats valid for 11.x?
In my case I will attempt to use it with SNAT=off (so the forward http-proxy can see the true client ip), will oneconnect still help or will it be just a bad idea to use it through a forward webproxy?
Also is oneconnect usable when doing ssl-proxying (the client visits a https site using the forward webproxy), I saw some comment on devcentral that IE7 and onwards isnt compatible with oneconnect (which I guess means that oneconnect then can/should only be used for http and one should use another vserver (or port) for the https traffic (which has oneconnect disabled))?
Because if oneconnect still is a good option even for forward webproxys this will avoid the need to change the settings in all clients regarding "max-connections-per-proxy=1" which I guess would yield the same result in my case with SNAT=off in the vserver config.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects