Forum Discussion

Remco's avatar
Remco
Icon for Nimbostratus rankNimbostratus
Nov 03, 2011

Redirecting http request to external url via proxy

Hi,     we are using F5 load balancers for our Internet environment. There is now a requirement during customer login to download a trojan detection script at an external company. But for the cl...
application delivery
dev
devops
iRules
Kurt_Knochner_5's avatar
Kurt_Knochner_5
Icon for Cirrus rankCirrus
Nov 04, 2011
"TCP::respond" to send the CONNECT command. Very nice. Thanks for that one!!

 

 

Now, to enable SSL using a server ssl profile, just use ssl:disable and ssl:enable at the right moment (samples are available on devcentral) and it would be possible to create what Remco was asking for, at least as I understood it:

 

 

Client --- HTTP --- LB --- HTTPS ---- Proxy:8080 --- HTTPS ---Server

 

 

However that's not even necessary if the clients are using SSL themselves. The SSL handshake would then take place between the clients and the HTTPS servers directly (as shown with your curl example).

 

 

Client --- HTTPS --- LB --- HTTPS ---- Proxy:8080 --- HTTPS ---Server

 

 

Regards

 

Kurt Knochner