Forum Discussion

Remco's avatar
Remco
Icon for Nimbostratus rankNimbostratus
Nov 03, 2011

Redirecting http request to external url via proxy

Hi,     we are using F5 load balancers for our Internet environment. There is now a requirement during customer login to download a trojan detection script at an external company. But for the cl...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Nov 04, 2011
not sure if i understand correctly. this is my testing. 

[root@iris:Active] config  b virtual bar list
virtual bar {
   snat automap
   pool squid
   destination 172.28.17.33:https
   ip protocol tcp
   rules myrule
}
[root@iris:Active] config  b pool squid list
pool squid {
   members 192.168.12.105:squid {}
}
[root@iris:Active] config  b rule myrule list
rule myrule {
   when SERVER_CONNECTED {
      set bypass 0
      TCP::respond "CONNECT www.google.com:443 HTTP/1.0\r\n\r\n"
      TCP::collect
 }
 when SERVER_DATA {
      if { $bypass eq 1 } {
              TCP::release
              return
      }
      if { [TCP::payload] starts_with "HTTP/1.0 200" } {
              TCP::payload replace 0 [TCP::payload length] ""
              TCP::release
              set bypass 1
      } else {
              TCP::close
      }
 }
}

[root@iris:Active] config  curl -Ik https://172.28.17.33/
HTTP/1.1 200 OK
Date: Fri, 04 Nov 2011 09:18:10 GMT
Expires: -1
Cache-Control: private, max-age=0
Content-Type: text/html; charset=ISO-8859-1
Server: gws
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Transfer-Encoding: chunked