Forum Discussion

JCMATTOS_41723's avatar
JCMATTOS_41723
Icon for Nimbostratus rankNimbostratus
Nov 06, 2007

Simple Reverse/Proxy Redirect?

We have a pair of F5 LTM 8400's 9.x and would like to use it to replace a couple Apache Reverse Proxies. We have an external HTTPS/443 VIP that we would like to securely redirect/proxy all HTTPS connections to a transparent internal HTTP/80 VIP to our corresponding .NET app servers. We would still like all connections to go thru the external VIP. What would be the best way to accomplish this?
  • Deb_Allen_18's avatar
    Deb_Allen_18
    Historic F5 Account
    Sounds like you want to proxy the HTTPS session established by the client over an HTTP session with the server.

     

     

    The simplest way to do that would be to create the port 443 virtual and apply a clientssl profile containing the appropriate cert/key reference. Then you'd create a pool containing the HTTP webservers, and apply that pool to the virtual server as a resource.

     

     

    If you need to mimic ProxyPass functionality, check out Kirk Bauer's ProxyPass iRule in the codeshare:

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/ProxyPass.html (Click here)

     

     

    /deb