For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JCMATTOS_41723's avatar
JCMATTOS_41723
Icon for Nimbostratus rankNimbostratus
Nov 06, 2007

Simple Reverse/Proxy Redirect?

We have a pair of F5 LTM 8400's 9.x and would like to use it to replace a couple Apache Reverse Proxies. We have an external HTTPS/443 VIP that we would like to securely redirect/proxy all HTTPS connections to a transparent internal HTTP/80 VIP to our corresponding .NET app servers. We would still like all connections to go thru the external VIP. What would be the best way to accomplish this?
config
design

1 Reply

  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    Nov 10, 2007
    Sounds like you want to proxy the HTTPS session established by the client over an HTTP session with the server.

     

     

    The simplest way to do that would be to create the port 443 virtual and apply a clientssl profile containing the appropriate cert/key reference. Then you'd create a pool containing the HTTP webservers, and apply that pool to the virtual server as a resource.

     

     

    If you need to mimic ProxyPass functionality, check out Kirk Bauer's ProxyPass iRule in the codeshare:

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/ProxyPass.html (Click here)

     

     

    /deb