Using Apache ProxyPass Irule for reverseproxy

Hi Shivam,

You shouldn't need to make any changes to the ProxyPass irule, unless you need to configure debugging or rewriteresponse under the RULE_INIT section.

If your VS name is salesforce_vs, then your datagroup should be called: ProxyPasssalesforce_vs

So with your examples of xyz.Salesforce.com/abc and app.company.com you would need to add the following to the datagroup.

string: app.company.com/ value: xyz.salesforce.com/abc

How are you looking at configuring your SSL offloading? I would assume you will need a client ssl profile for app.company.com and a server ssl profile so that the traffic to salesforce is encrypted.

I did Apache proxypass config for years, and have used the equiv iRule, to good effect - that said, in many situations you can get by with something much simpler.

1. Create your SSL offload virtual server
2. Define and add to the VS a stream profile, and define your string replacements there; if you have multiple replacements, use a regexp in the "Target" field only. See: https://support.f5.com/kb/en-us/solutions/public/8000/100/sol8115.html ... this will make replacements in both your headers and content returned. For help in formatting string replacements: https://devcentral.f5.com/articles/ltm-stream-profile-multiple-replacements-regular-expressions but make sure to check the previous link i provided, because some things change in v11, and more changes in v11.4
3. If you're pre-11.4, make sure to set response processing in the HTTP profile to "rechunk"

Voila. Note this works if you don't need content-specific logic concerning what string replacements to make.

I did Apache proxypass config for years, and have used the equiv iRule, to good effect - that said, in many situations you can get by with something much simpler.

1. Create your SSL offload virtual server
2. Define and add to the VS a stream profile, and define your string replacements there; if you have multiple replacements, use a regexp in the "Target" field only. See: https://support.f5.com/kb/en-us/solutions/public/8000/100/sol8115.html ... this will make replacements in both your headers and content returned. For help in formatting string replacements: https://devcentral.f5.com/articles/ltm-stream-profile-multiple-replacements-regular-expressions but make sure to check the previous link i provided, because some things change in v11, and more changes in v11.4
3. If you're pre-11.4, make sure to set response processing in the HTTP profile to "rechunk"

Voila. Note this works if you don't need content-specific logic concerning what string replacements to make.

Hi Shivam,

Depending on how complicated your Apache rewrite configuration is, you can look into using LTM policies. The following page describes how best to use this https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-6-0/24.htmlconceptid

when HTTP_REQUEST {

              HTTP::header replace Host "app.company.com"

}

when HTTP_RESPONSE {

              HTTP::header replace Host "xyz.Salesforce.com"

}

Hello All,

Thanks for posting the responses. It was really helpful. Got it working finally..

Thanks Shivam