Forum Discussion

Remco's avatar
Remco
Icon for Nimbostratus rankNimbostratus
Nov 03, 2011

Redirecting http request to external url via proxy

Hi,     we are using F5 load balancers for our Internet environment. There is now a requirement during customer login to download a trojan detection script at an external company. But for the cl...
application delivery
dev
devops
iRules
David_18981's avatar
David_18981
Icon for Nimbostratus rankNimbostratus
May 07, 2014

Hi DevCentral,

 

i'm currently trying to use this brilliant solution to send http to froward proxy server, but i'm encountering an issue :

 

  • I have configured the same setup (with 2 VS)
  • But when the second VS sends the "HTTP CONNECT" to the proxy, it doesn't wait for the reply "200 OK" and just sends the "CLIENT HELLO" received from the first VS.
  • Result => when receiving the 200 OK from the proxy, the SSL session doesn't get established as the client waits for the "SERVER HELLO" which never arrives.

Here is the diagram observed between F5 and proxy :

 

  • (F5 -> Proxy) CONNECT toto.com:443 HTTP/1.1
  • (F5 -> Proxy) CLIENT HELLO
  • (Proxy -> F5) HTTP/1.1 200 Connection established ...

Here is the expected diagram :

 

  • (F5 -> Proxy) CONNECT toto.com:443 HTTP/1.1
  • (Proxy -> F5) HTTP/1.1 200 Connection established
  • (F5 -> Proxy) CLIENT HELLO
  • (Proxy -> F5) SERVER HELLO, CERTIFICATE, SERVER HELLO DONE, ...
  • (F5 -> Proxy) Application Data

Someone knows what to do to make it works ?

 

Thanks...