Forum Discussion

Jason_19901's avatar
Jason_19901
Icon for Nimbostratus rankNimbostratus
May 21, 2013

Reverse Proxy XenApp

The intranet is handing all of the XenApp tasks. the F5 is handing the intranet site. we are migrating from juniper ssl to APM. there are some javascript files on the intranet page that after someone logs in, they will be directed to the correct XenApp based on location attribute in AD. I need a way to reverse proxy these files. how would i do that? would i use an iRule?

 

I need to insert these in the header

 

 

 

http://myxyqa.something.com:80/services/citrix/apps.ashx*

 

http://myxyqa.something.com:80/services/citrix/launch.ica*

 

http://myxydev.something.com:80/services/citrix/apps.ashx*

 

http://myxydev.something.com:80/services/citrix/launch.ica*

 

http://myxy.something.com:80/services/citrix/apps.ashx*

 

http://myxy.something.com:80/services/citrix/launch.ica*

 

 

Header values

 

x-UserLocation us.xy.com

 

X-JuniperHello www.xy.com

 

X-ForwardedUsername

 

X-ForwardedPassword

 

 

1 Reply

  • I'm guessing, because you're talking about "Juniper SSL", that you're also referring to APM in terms of SSL VPN? If so, I would argue that while you could serve these (static) files from the F5, you shouldn't have to, or probably wouldn't really want to, considering that APM can do all of this for you natively. APM provides an ICA proxy capability, the ability to look up users in an AD, and redirect client connections where necessary. With APM, you can also completely remove the Access Gateway, STA, and Web interface from a Citrix environment.

     

     

    If you could elaborate on how the process currently works (what the headers and JavaScript files are actually doing), it'll be easier to help with an alternative mechanism. Otherwise, take a look at the following thread that discusses serving files from iRules: https://devcentral.f5.com/community/group/aft/2166695/asg/50.